Re: [Zope] Too many Roles?

2000-06-06 Thread Stuart 'Zen' Bishop

On Mon, 5 Jun 2000, David Ornstein wrote:

  Is it crazy to have 20 or 30 roles in my Zope system? 

Nah.

Note that you need to create roles at a point in the tree, and they 
then appear and are usable on the management interfaces from that point
down.

I have to restrict access to resources by student subject or course.
I'm currently only using about 60, but its quite possible I'll quickly
end up in in the hundreds when more students start using Zope resources.
The trick is to only 'create' the role when you need to grant rights
to it. A role exists only in the point in the tree it is created and
down, and there is nothing to stop you creating the same role in
multiple locations. If you create them all in your root folder, your
security screens become useless, but it is fine if you only have
5-10 defined at any particular point.

-- 
Stuart Bishop  Work: [EMAIL PROTECTED]
Senior Systems Alchemist   Play: [EMAIL PROTECTED]
Computer Science, RMIT University


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )




Re: [Zope] Too many Roles?

2000-06-05 Thread Kevin Dangoor

- Original Message -
From: "David Ornstein" [EMAIL PROTECTED]
To: "zope-admin" [EMAIL PROTECTED]
Sent: Monday, June 05, 2000 11:25 PM
Subject: [Zope] Too many Roles?


  Is it crazy to have 20 or 30 roles in my Zope system? 

 I've got members of the site who sit on this working group or that working
 group and various subgroups and I need to be able to control access to the
 various areas of the site based on this membership.  Roles seem like the
 right choice here, but I'm wondering if this is crzay.  Does this rub any
of
 the Zopexperts the wrong way?

You might want to look at Local Roles. I believe using Local Roles, you
could create a role like "WGMember", and then designate that certain people
have the WGMember role in certain folders... this may work out to be cleaner
than building separate roles for working group...

Kevin


___
Zope maillist  -  [EMAIL PROTECTED]
http://lists.zope.org/mailman/listinfo/zope
**   No cross posts or HTML encoding!  **
(Related lists - 
 http://lists.zope.org/mailman/listinfo/zope-announce
 http://lists.zope.org/mailman/listinfo/zope-dev )