More on: Sharing Membership between multiple Plone Sites

I recently sent a message on "How to share our Members' membership between
our many Pone Sites". I received quite a few comments from both Priyadarshan
and Jagrata. I didn't take the trouble of answering - so far. Better late
than never...:

Jagrata:
This means that a Member would have the same roles in all sites: those
assigned in Zope's acl_users, right? Or can we override this on the site
level?

Priyadarshan:
That is an essential point. We do not want to lose the GRUF usability. I do
believe GRUF is usable outside Plone. Also, a person who is a reviewer on
one site, maybe is just a regular member on another site. Common login
should not automatically indicate common roles among sites.

My response:
My idea was to have only the world out there as Members of Zope's parent
acl_users, and they would indeed have the same role on all sites, which
means they would be Authenticated Users on all sites. All of us, however,
would be users on the Plone Site level. Thus, someone could be a reviewer on
one site, an editor on another and an ordinary Member on all other sites,
etc. etc.
GRUF does not take place outside of a Plone Site. But this fine-grained
membership logic seems to me only necessary for us guys (editors, reviewers
etc.) and not for the public users, who will be treated all equally, having
the right to see content and maybe make some comments, save their favorites
and so on. So if this philosophy of mine is correct, then this approach (as
described in my previous How-To) is applicable.

Jagrata:
Ok. Site Administrators, Editors, Designers in the individual Plone Site
acl_users. Members and Anonymous Users in Zope's acl_users in the root of
the public Zope instance(s) filestorage. Let's assume that a Member is known
in Zope's acl_users. If that Member logs in to srichinmoy.org, and then
points
his browser to srichinmoyraces.org, does he have to log in again?

Priyadarshan:
Common login means that I have same login and same password. If the session
is based on the domain name, I would have to relogin if i type
the address in the bar. But maybe using cookies this can be avoided. Cookies
can be shared by many sites.

My response:
No! Let us assume that you are logged in to srichinmoy.org and there, you
click on a link to srichinmoyraces.org, then you are automatically logged in
there, too! (I tried it.) At this point, Plone is smart (don't forget that
we are still living inside the same Zope instance), and we don't have to use
cookies.

Jagrata (concerning member properties like "gender"):
So when I join srichinmoy.org, my "gender" is not understood by
srichinmoyraces.org, right? It seems that I would have to establish my
"gender" separately
for all my sites in the set.

My response:
You are right. These properties are defined on the Plone-Site-level, so one
might even define different properties for different sites, and naturally
the different sites don't know about the properties on other sites. This
might even make sense for us. On certain sites, we might want to take a more
"personal approach", asking people all kinds of things about them, while on
other sites, me might want them to be able to keep their privacy.

Best wishes
Dhyani



--------------------------------------------------------------------------
This message is sent to you because you are subscribed to the mailing list <VasudevaService-K9y3B4ipJAZZAIG4hdpdiNBPR1lH4CV8@public.gmane.org>.