Re: Aplaws 5.2 Object Permissions

Site wide administrators inherit admin privilege on all objects from
object 0. Without looking into the code, I don't know if this
inheritance is explicit or implicit.

If it's implicit, ie the permissions code treats object 0 specially,
there's nothing you can do about it. If it's explicit, ie there are
mappings in object_context which create a path from all objects back to
object 0, then you might be able to break that inheritance somehow.

I don't think we've ever done this, so even if it is possible, it might
break everything :)

Matt

On Thu, 2004-08-05 at 10:55, David Young wrote:
> Hi,
> 
> Is there anyway of preventing a Group object from being deleted by
> anyone (including the administrator)
> 
> I have tried the following but this does not seem to work - the admin
> user (id = 23) can still delete this object using the administrator
> tools.
> 
>        PermissionDescriptor perm = new PermissionDescriptor(
>                        PrivilegeDescriptor.ADMIN,
>                        group.getOID(),
>                        new OID("com.arsdigita.kernel.User", 23));
> 
>        PermissionService.revokePermission(perm);
> 
> Is what I want possible?
> 
> Thanks
> 
> David
> 
> 
> **********************************************************************
> The information contained in this transmission may be
> confidential and may also be the subject of legal
> professional privilege. If you are not the intended recipient,
> any use, disclosure or copying of any part of this transmission
> is unauthorised. If you have received this transmission in
> error, please notify the originator immediately.
> 
> www.southoxon.gov.uk
> **********************************************************************
> 


-- 
Redhat-ccm-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-ccm-list
Archives: https://www.redhat.com/pipermail/redhat-ccm-list/