Antville Project

About permissions

Here is another addition to our discussion about membership. One key feature I miss in Manila is the lack of something like a content editor. I want to be able to set up a site for someone else such that he can manipulate the full content but not the site design.

comment    

 
hns, November 19, 2001 at 10:58:57 AM CET

that's what

the "contributor" does, innit? is there some limitation for contributors (compared to admins) in regard to content control? Other people's stories I guess?

Hm, would make sense IMO. Something like "managing editor".

We really need to do bit-level checks (bitwise or) for finer grained roles and permissions. For example, if perm is an integer that describes a user's role on a weblog, we'd do:

(1 | perm) (2 | perm) (4 | perm) (8 | perm)

etc to check set single permissions.

Too flexible for our purpose?

link  

 
kris, November 19, 2001 at 2:14:02 PM CET

it's fine as it is

currently the admin can define navigation menus for members, contributors and admins. everything is fine for me as long as you don't change this. in case i want to set up a site for someone else i can simply remove the link to the skin editor. this is not possible for manila, because they automatically generate an "editors" menu.

if you switch to user specific permissions as in movable types or as suggested you have to rework the navigation menus.

link  

 
robert, November 19, 2001 at 10:41:40 PM CET

i like

the idea of a "managing editor", but i have really no idea what bitwise or-checks could do in case of finer grained permissions ... pls explain.

link  

 
hns, November 19, 2001 at 11:10:22 PM CET

Actually

I was mainly thinking out loud. What I described is a technique to implement fine grained rights management, i.e. a situation where you don't have predefined roles, but permissions that can be combined individually. So what you do is to use the single bits of an integer number to encode these permissions. The lowest order bit of the number means a user has permission x if it is set, or doesn't have permission x if it is not set. the next bit represents a different permission, and so on. You set and check these bits individually by using the "bitwise and" operator & and the "bitwise or" operator |. For example, to switch on bit 3, you'd do

perm | 4

and to check for the second bit you'd do

perm & 2

Of course then you use constants with nice names to represent these permissions:

MAY_WRITE = 1; MAY_EDIT = 2; MAY_SET_PREFS = 4; MAY_EDIT_SKINS = 8; IS_HOLY_GHOST = 16;

...

if (memberinfo & IS_HOLY_GHOST) res.writeln ("HALELUJA!");

link  


... comment
 
kris, November 22, 2001 at 8:25:40 PM CET

use case

i just had a long talk with the boss of my favourite local club. they definitely want an antville site or something similar on their own server. in their case content managers are essential and i suspect, simply hiding the "skin" link won't do.

where i live it is a common sport by nazis to spam guest book and discussion groups. to delete crap by such idiots the club definitely needs more people with the permission to delete comments or close open tags without giving these moderators full access to the templates.

link  


... comment


The Antville Server Fund has been a great success. Thanks to everybody who contributed!
online for 8551 Days
last updated: 1/4/11, 10:22 AM
status
Youre not logged in ... Login
menu
November 2024
SunMonTueWedThuFriSat
12
3456789
10111213141516
17181920212223
24252627282930
July
recent
zfuture's house here is zfuture's
house
by zfuture (7/31/03, 2:59 AM)
i understand your concerns however,
i hardly can think of a solution. certainly, if the...
by tobi (7/29/03, 9:47 AM)
Found several more similar sites
listed This is getting to be quite a concern to...
by cobalt123 (7/27/03, 7:56 PM)
Second Post Alert on Referrer
bug livecatz I put this into "help" and now here:...
by cobalt123 (7/26/03, 7:14 PM)
well it's not easy to
find from here, anyway. think we should include a link,...
by tobi (7/24/03, 11:25 AM)
So finally I found
the helma Bugzilla - stupid me.
by mdornseif (7/24/03, 10:28 AM)
clock not that it's particularly
earthshattering but the antclock is running slow by about 15...
by kohlehydrat (7/23/03, 8:25 PM)
but blogosphere.us isn't can't really
be rated as spam can it?
by kohlehydrat (7/23/03, 8:08 PM)
More referrer spam www.webfrost.com
by Irene (7/23/03, 7:55 PM)
How to log skin names
I accessed to console?? Hi, I would like to know...
by winson (7/23/03, 4:12 PM)

Click here to get an XML version of this weblog.

Made with Antville
powered by
Helma Object Publisher