Re: Replacing local roles on users with local roles on groups

On Thu, Nov 21, 2013 at 7:15 PM, Dylan Jay <djay-n0pU0XVUApFWk0Htik3J/[email protected]> wrote:

>
> On 22 Nov 2013 02:01, "Matt Hamilton" <[email protected]> wrote:
> >
> > Hi All,
> >   I'm currently sprinting on a suite of functionality for intranets in
> > Plone. This effort came about from an open space on intranets in
> > Brasilia.
> >
> > The aspect we are currently working on and brainstorming is the concept
> > of 'workspaces'. We are basing our work on David Glick's
> > collective.workspace package he is working on (taking ideas from the
> > other dozen 'workspace' implementations around).
> >
> > As anyone who has run a large Plone site knows, that assigning local
> > roles to users on containers can be expensive as it involves calling
> > reindexObjectSecurity on all children of the folder.
> >
> > The way we've always worked around this (and what c.workspace does,
> > and what many other people seem to do) is to create a group for the
> > 'workspace' and then assign the local roles to this group. Then manage
> > 'membership' of the workspace by adding/removing users from the group.
> >
> > I'm now wondering if this could be generalised to be a generic add-on
> > to Plone that entirely (mostly transparently) replaces local roles
> > added to users with local roles added to groups.
>
this is not exactly the same, but
we use in production on many sites now collective.local.addgroup plugin
that allows you to create and manage group at the level of a workspace
collective.local.adduser allows users to create user accounts and give them
a local role on a workspace

Please have a look there and give your opinion
http://fr.slideshare.net/ThomasDesvenain/collectivelocal-plog2013-v2

>
> > >From the (existing) Sharing Tab if you assigned a local role to a
> > user, then it would behind the scenes create a group (maybe with a
> > custom PAS groups plugin, like c.workspaces) add the user to that
> > group and then assign the local role to that group. This first time
> > this happens for a particular content item / role combo then the
> > children would have to be re-indexed, but subsequent times you assign
> > a user that role on this container it would simply add the user to the
> > already-existing group.
> >
> > If maybe we can use a separate PAS plugin that would handle the
> > generation of the groups (which may not 'appear' as groups as we know
> > them) can anyone see why this idea would be insane? Anyone know of any
> > other products / PLIPs addressing this?
>
> I think this is sounding good. I think making the groups appear as regular
> groups might be a good thing. A couple of times I've considered
> implementing a plugin that makes groups from local roles so that you can
> reuse a set of users who are say editors of news in other places such as
> content roles or other sharing tabs. Maybe the ui could be changed to give
> the group a symbolic name instead if this being a behind the scenes change?
> This could also decentralise group management so you don't need to be a
> site admin to do it.
>
> >
> > Done this way, then we shouldn't need to change any of the behaviour
> > of the allowedRolesAndUsers index and all that stuff (which is a mess
> > too, but a far bigger problem to solve).
> >
> > -Matt
> >
> > --
> > Matt Hamilton, Technical Director
> > Netsight Internet Solutions Limited
> > http://www.netsight.co.uk/matth
> > Tel: 0117 90 90 90 1 Ext. 13
> >
> > Registered in England No. 3892180
> > Registered office: 40 Berkeley Square, Clifton, Bristol, BS8 1HU
> >
> >
> >
> ------------------------------------------------------------------------------
> > Shape the Mobile Experience: Free Subscription
> > Software experts and developers: Be at the forefront of tech innovation.
> > Intel(R) Software Adrenaline delivers strategic insight and game-changing
> > conversations that shape the rapidly evolving mobile landscape. Sign up
> now.
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> > _______________________________________________
> > Plone-developers mailing list
> > Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> > https://lists.sourceforge.net/lists/listinfo/plone-developers
>
>
> ------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing
> conversations that shape the rapidly evolving mobile landscape. Sign up
> now.
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers
>
>


-- 
Thomas Desvenain

Téléphone : 09 51 37 35 18

------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk

_______________________________________________
Plone-developers mailing list
Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/plone-developers