[phpBT-dev] [PATCH] Fine Grained Permissions and Roles

[Ulf E. <ulf...@fa...>]

Benjamin Curtis wrote:
> Looks good. :)

Thanks:)

Here is a first draft of my patch. It's very very untested still.. 
that's why I am sending a patch instead of committing it all to CVS 
(that and that i am missing pgsql/oci8 support and an upgrade script).

Please try it anyway. Pull a new version from CVS and apply this patch. 
Don't try to upgrade! Just play with some new projects, bugs and users. 
I'd like to get some feedback on this such that it can be finished on 
time for 1.1.. I will not have time to look at it for next week myself

> On Oct 13, 2005, at 2:45 AM, Ulf Erikson wrote:
>> * Ulf Erikson [2005-09-16, 23:40:10 +0200]:
>>
>>> I'm planning to introduce a set of new permissions. There are  currently
>>> only four permissions in phpBugTracker: Admin, Editbug,  EditAssignment,
>>> Assignable. I wish to extend this such that it is possible to decide
>>> what fields users of the different groups may enter/change/delete as
>>> either the report, owner or neither.
>>
>> I plan to add: AddBug, EditProject, EditComponent, EditStatus,  CloseBug,
>> EditResolution, EditPriority, EditSeverity, and AddComment.
>>
>>> The discussion half a year ago
>>>    http://sourceforge.net/mailarchive/message.php?msg_id=10850283
>>> quikly grow into something real big and ambitious. I'll try to  keep 
>>> it a
>>> bit simpler this time. It will be configurable, but [NOT] as  extreme as
>>> suggested earlier.. I need your help to find a good balance.
>>
>> As discussed with Benjamin I plan to introduce roles as a  complement to
>> the current groups. I'm thinking of: AnonymousGuest,  AuthenticatedUser,
>> BugReporter, BugAssignee, ComponentOwner, ProjectAdmin, and
>> BugTrackerAdmin. (The last two will not be configurable)
>>
>> Having a role can only give you more permissions. (logical OR with  your
>> current permissions)
>>
>> I think some hierarchie can be good here: A user should also be a  guest,
>> and a reporter or assignee should also be a user (and thus also a
>> guest).
>>
>> Comments?