Re: [phpBT-dev] Fine Grained Permissions

[Ulf E. <ulf...@fa...>]

* Ulf Erikson [2005-09-16, 23:40:10 +0200]:
> I'm planning to introduce a set of new permissions. There are currently 
> only four permissions in phpBugTracker: Admin, Editbug, EditAssignment, 
> Assignable. I wish to extend this such that it is possible to decide 
> what fields users of the different groups may enter/change/delete as 
> either the report, owner or neither.

I plan to add: AddBug, EditProject, EditComponent, EditStatus, CloseBug,
EditResolution, EditPriority, EditSeverity, and AddComment.

> The discussion half a year ago
>    http://sourceforge.net/mailarchive/message.php?msg_id=10850283
> quikly grow into something real big and ambitious. I'll try to keep it a 
> bit simpler this time. It will be configurable, but [NOT] as extreme as 
> suggested earlier.. I need your help to find a good balance.

As discussed with Benjamin I plan to introduce roles as a complement to
the current groups. I'm thinking of: AnonymousGuest, AuthenticatedUser,
BugReporter, BugAssignee, ComponentOwner, ProjectAdmin, and
BugTrackerAdmin. (The last two will not be configurable)

Having a role can only give you more permissions. (logical OR with your
current permissions)

I think some hierarchie can be good here: A user should also be a guest,
and a reporter or assignee should also be a user (and thus also a
guest).

Comments?

-- 
Ulf