On Jul 8, 2006, at 10:35 AM, mathew wrote:

> The proposal seems very elaborate, yet as far as I can tell it fails
> the simple use case I have:
>
> "Like today, except only registered users with accounts can post
> comments."
>
> Am I missing something?


This is all determined by the contents of the userroles_permission  
table, and it can be adjusted however you want. The sql that I've  
provided for insertions reflects a default value in which all users  
can comment. But that's easily changed on a database level.

All you'd have to do to remedy this is delete the following row from  
the userroles_permission table:

user_role_id:       1    # anonymous user
permission_zone_id: 1001 # comment zone
permission_type_id: 30   # create
permission_zone_id: 1    # own

And insert the following row in its place:

user_role_id:       3    # user
permission_zone_id: 1001 # comment zone
permission_type_id: 30   # create
permission_zone_id: 1    # own

This could be effected in the "advanced/expert" level permissions  
adjustment user-interface that allows fine tuning, and it could also  
be effected by offering  it as on option activated with a checkbox in  
the "beginner" level interface. But it is a permissions level that is  
easily allowable, and that can be given expression in any number of  
user interface approaches.


-------------------------------------------------------
   David King Landrith
    (w) 617.227.4469x213
    (h) 617.696.7133

   One useless man is a disgrace, two
   are called a law firm, and three or more
   become a congress   -- John Adams
-------------------------------------------------------
public key available upon request




_______________________________________________
Typo-list mailing list
[email protected]
http://rubyforge.org/mailman/listinfo/typo-list

Reply via email to