Re: Replacing local roles on users with local roles on groups

On 22 Nov 2013 02:01, "Matt Hamilton" <[email protected]> wrote:
>
> Hi All,
>   I'm currently sprinting on a suite of functionality for intranets in
> Plone. This effort came about from an open space on intranets in
> Brasilia.
>
> The aspect we are currently working on and brainstorming is the concept
> of 'workspaces'. We are basing our work on David Glick's
> collective.workspace package he is working on (taking ideas from the
> other dozen 'workspace' implementations around).
>
> As anyone who has run a large Plone site knows, that assigning local
> roles to users on containers can be expensive as it involves calling
> reindexObjectSecurity on all children of the folder.
>
> The way we've always worked around this (and what c.workspace does,
> and what many other people seem to do) is to create a group for the
> 'workspace' and then assign the local roles to this group. Then manage
> 'membership' of the workspace by adding/removing users from the group.
>
> I'm now wondering if this could be generalised to be a generic add-on
> to Plone that entirely (mostly transparently) replaces local roles
> added to users with local roles added to groups.
>
> >From the (existing) Sharing Tab if you assigned a local role to a
> user, then it would behind the scenes create a group (maybe with a
> custom PAS groups plugin, like c.workspaces) add the user to that
> group and then assign the local role to that group. This first time
> this happens for a particular content item / role combo then the
> children would have to be re-indexed, but subsequent times you assign
> a user that role on this container it would simply add the user to the
> already-existing group.
>
> If maybe we can use a separate PAS plugin that would handle the
> generation of the groups (which may not 'appear' as groups as we know
> them) can anyone see why this idea would be insane? Anyone know of any
> other products / PLIPs addressing this?

I think this is sounding good. I think making the groups appear as regular
groups might be a good thing. A couple of times I've considered
implementing a plugin that makes groups from local roles so that you can
reuse a set of users who are say editors of news in other places such as
content roles or other sharing tabs. Maybe the ui could be changed to give
the group a symbolic name instead if this being a behind the scenes change?
This could also decentralise group management so you don't need to be a
site admin to do it.

>
> Done this way, then we shouldn't need to change any of the behaviour
> of the allowedRolesAndUsers index and all that stuff (which is a mess
> too, but a far bigger problem to solve).
>
> -Matt
>
> --
> Matt Hamilton, Technical Director
> Netsight Internet Solutions Limited
> http://www.netsight.co.uk/matth
> Tel: 0117 90 90 90 1 Ext. 13
>
> Registered in England No. 3892180
> Registered office: 40 Berkeley Square, Clifton, Bristol, BS8 1HU
>
>
>
------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing
> conversations that shape the rapidly evolving mobile landscape. Sign up
now.
>
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk

_______________________________________________
Plone-developers mailing list
Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/plone-developers