plone permissions manual

Hey doc team-

I've gotten caught up in doing some research at work, got frustrated
and thus decided we need a permissions manual.

So far this manual will contain:
- definitions on default roles and groups and the permissions that are
associated with them
- common customizations/use cases
- ZMI default permissions- what does each permission mean and what
does it control
- local roles- what are they, when to use, etc
- best practices-
- how roles work/interact with workflows


I seem to remember someone was working on something along these lines
awhile ago, but I'm not seeing anything on plone.org. Since
permissions are complicated and very underdocumented, I need some
help. If you have time, please raise your hand and contact me. Also,
if there are other things that a permissions manual should cover,
please let me know your thoughts. We are only going to cover defaults
in Plone and just a handful of the most common changes that people
make when adjusting their sites. The audience for this manual
definitely isn't end user but you shouldn't have to be a programmer to
understand it either.
As soon as I get some volunteers, I'll set up a collaborative space
for us to work on this. Right now I just have a bunch of messy notes
since at this point I'm just doing research.
Security and Permissions is a sorely under served section of our
documentation. Let's beef it up starting with this manual!


JoAnna

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf