I want to set up a user/admin user hierarchy in the following way: Articles will be 
authored by specific users, and the authors of those articles should be able to 
edit/delete such articles. Also, they should be able to read other users' articles 
contained in their sitegroup.

However, they should not be able to edit/delete articles authored by others in their 
sitegroup, unless they are a member of the "admin" group. And, they should not be able 
to create/modify/delete topics which contain articles, unless they are in the "admin" 
group.

So, my thought was to make the topics "owned" by the admin group, but to have 
individual articles "authored" by users.

But, I've found that with this setup, the user-level people can't delete/modify their 
own articles, unless they are part of the "admin" group. When they are part of the 
admin group, then they seem to be able to write over all articles in the sitegroup. I 
was under the impression from the documentation that articles are read/write for 
members of the owner group of the parent topic + the author of the article itself 
(regardless of that author's membership in the topic group).

Am I using the rights system in the wrong way? What's the most natural way to achieve 
my goals using Midgard?

-------------------
A second scenario that I'm trying to accomodate it the following. Imagine a write-only 
anonymous "drop box". So, a web page might have a form, which allows anyone to drop a 
message into the system for various subscribed users of that system. My approach is to 
have the form use "mgd_auth_midgard" to take on the identity of the target user, so 
that the submitted text can be written to the proper user topic as an article 
"authored" by the target of the drop. This will allow that user to read/modify/delete 
the dropped article.

E.g.    - Anonymous user --(POST text for "bob+sg4")-->
        - mgd_auth_midgard( root=bob$sg4, rootpass, 0);
        - mgd_create_article....

The idea is to create this article so that bob can "own" and delete the article in the 
future.

Am I using the "mgd_auth_midgard" function in the right way? The script knows the 
name/password of the root user, so the idea is to have the script login and create the 
new article with author/sitegroup of "bob".

I get an error when I use "mgd_auth_midgard". Any ideas on this? Is this the right way 
to accomplish my goal?

Thanks,
/Jim


__________________________________________________________________
McAfee VirusScan Online from the Netscape Network.
Comprehensive protection for your entire computer. Get your free trial today!
http://channels.netscape.com/ns/computing/mcafee/index.jsp?promo=393397

Get AOL Instant Messenger 5.1 free of charge.  Download Now!
http://aim.aol.com/aimnew/Aim/register.adp?promo=380455

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to