|
There are various use cases that need groups to be defined locally, for instance:
- workspace templates that include some standard ACLs and where the groups to which they apply will be customized locally,
- workflow that manages permissions for a standard group defined locally.
To do that we need to introduce a local (in-ACP) definition of a group. This generalizes the notion of "owner" that is already in the spec.
The indexing will have to take local groups into account too.
Open questions:
- can a local group override a higher-level local group? Do we want to just "extend" it sometimes? Do we want exclusions?
- can a local group override a global group? Same questions as above.
- do we want to introduce the term "role"? Just in the UI?
|
|
|
|
![]() |
|
_______________________________________________
ECM-tickets mailing list
ECM-tickets@lists.nuxeo.com
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets