On 2/3/06, Jann Forrer <[EMAIL PROTECTED]> wrote: > On Thu, 2 Feb 2006, sharif islam wrote: > > > According to this page: http://solprovider.com/lenya/security lenya > > (1.2) cannot assign specific permissions to groups: > > > > " This is a hack because Lenya 1.2.2 does not meet its own specifications: > > Excerpt from http://lenya.apache.org: > > Security: The access control allows you to restrict access to parts of > > your site to members of a group or individuals. > > This may be possible, but it is not easy, and cannot be configured by > > the typical developer (meaning I could not figure it out, and my > > skills are advanced well beyond the typical developer.) " > > > > I created a group called 'myGroup' with a member 'newUser'. Then I > > created a new page under the home directory login in as admin. I gave > > edit role to the group 'myGroup' for that new page. (Home->newpage). > > I was able to edit the new page only after I added 'newUser' to the > > edit group. However, that also allowed me to edit the Home page. I > > didn't want that. This seems to be a pretty basic functionality. I am > > not sure what I am missing. > > > > I am working with lenya-1.2.x and i did use that feature quite often and > it works for us. > However i tried your usecase described above: > In the defautl pub i created a new group "newGroup" and adding a > "newUser" (this user is only in the group newGroup). Then I gave the > newGroup the right to edit /newpage. The user newUser is no able to edit > /newpage but could not edit the homepage. Note that i did not add the > newUser to the edit group! > One drawback remains: The newUser can only login into the > /newpage but not into any other page. That means he has to remember the > page title in order to login into the system :-( > > Jann >
Yes, that last behavior is a real annoyance to my customers, and I wonder if anyone knows how to change it so that such restricted users can log into the top level (home page) but still only be able to edit their specific sub-tree. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
