Re: Replacing local roles on users with local roles on groups

On 23 Nov 2013, at 4:31 am, Matt Hamilton <[email protected]> wrote:

> Dylan Jay <djay@...> writes:
> 
>> I think this is sounding good. I think making the groups appear
>> as regular groups might be a good thing. A couple of times I've
>> considered implementing a plugin that makes groups from local
>> roles so that you can reuse a set of users who are say editors
>> of news in other places such as content roles or other sharing 
>> tabs. Maybe the ui could be changed to give the group a
>> symbolic name instead if this being a behind the scenes 
>> change? This could also decentralise group management so 
>> you don't need to be a site admin to do it. 
> 
> David Glick also asked for a similar functionality, but I think
> it would be hell to implement. So, if I want to create a local
> role group in Folder A, what do I call it?

FolderA_Editors?

> Does the user name
> it symbolically?

Maybe they get the option to override the automatic name

> If someone else then wants to re-use that group
> how can they do it?

Using the convention above.

> Will they agree that the name fits the local
> roles they want to add in Folder B?

The automated name has to change to include the role(s) since all members of a group are equal in plone.

> What if they want to remove
> a user from that group, but that then changes the rights on 
> Folder A?

Folder B can't change who is in FolderA_Editors group. They have deliberately delegated that responsibility to FolderA.
I think the implementation would be pretty similar to what you are doing except that in the sharing tab you can search not just for users and regular groups, but also the special groups you are creating in the background for other folders. So effectively the sharing tab allows you to delegate responsibility to a user, group or another folders local role.

> 
> I think Thomas' product allowing the local creation of regular
> Plone groups would be a better fit.

yeah it could be simpler to understand.

> 
> I've been playing with my idea today, and the code is at:
> 
> https://github.com/netsight/collective.localrolesbygroups
> 
> So far you can add a local role to a user on a folder and it will
> transparently behind the scenes add the user to a group and
> add the local role to the group. When you view the sharing tab
> it then expands the groups so it still looks like individual users.
> TODO: write the logic to remove roles from users and also
> determine if the operation is a no-op.
> 
> -Matt
> 
> 
> ------------------------------------------------------------------------------
> Shape the Mobile Experience: Free Subscription
> Software experts and developers: Be at the forefront of tech innovation.
> Intel(R) Software Adrenaline delivers strategic insight and game-changing 
> conversations that shape the rapidly evolving mobile landscape. Sign up now. 
> http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk
> _______________________________________________
> Plone-developers mailing list
> Plone-developers-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
> https://lists.sourceforge.net/lists/listinfo/plone-developers


------------------------------------------------------------------------------
Shape the Mobile Experience: Free Subscription
Software experts and developers: Be at the forefront of tech innovation.
Intel(R) Software Adrenaline delivers strategic insight and game-changing 
conversations that shape the rapidly evolving mobile landscape. Sign up now. 
http://pubads.g.doubleclick.net/gampad/clk?id=63431311&iu=/4140/ostg.clktrk