On 02/05/13 15:15, Joachim Dreimann wrote:
Every registered user should be allowed to see the Dashboard.
The Dashboard may be empty if the user has no permissions to see anything
else. Just as it is on a new installation with no information yet.
Empty should not mean a blank page, but one helping to get started, learn
more, how to request permissions, whatever the case may be.
When you say that every registered user should be allowed access that
would suggest that there are situations where anonymous users should not
be able to see the page. Unless you are attempting to argue for no
constraints on access then using a permission to specify local policy
would be consistent with the normal approach elsewhere.
It looks like DASHBOARD_VIEW might be the obvious permission to use for
this but we could make it so that DASHBOARD_VIEW is automatically
granted by TICKET_VIEW. This would deny the ability to distinguish the
two permissions without using fine grained permissions though.
Your point about the empty page is good but it may be appropriate to
allow the information there to be fairly customisable so that the empty
view can be made to show information appropriate to the site.
Cheers,
Gary