MindTouch Community Portal
Logged in: Logged in as: Log in
Register
Search:
Page last modified 16:34, 4 Aug 2010 by MaxM
User:maxm > Permissions brainstorming
Page Notifications Off

Permissions brainstorming

    Common problems with permissions
    • Confusion about public vs semi-public vs private. Public is 'relative'
    • Not obvious what the permissions is of not logged in users
    • Cascading permissions to subpages is confusing, often surprises user, cannot be undone
    • No way to visualize and manage permissions for a tree of pages
    • No way to explicitly set permissions for all logged in users
    • It's not clear what a role allows from the page permission screen

     

     

    Some solutions..Maybe
    • Get rid of restrictions list on the UI
    • Add the ability to add rights to anonymous user
    • Add the ability to add rights to built in group 'Authenticated users'
    • Ability to request access to a page
      • Email is sent to page creator having a link to page dialog with user filled in
    • A page that shows a page tree and allows quick access to permissions information

     

    Default permissions = public restriction

     

    [ ] Default user permissions
        ____________________

    [x] Custom user permissions:

          Guests have:

          Logged in users have:

          [JohnSmith] has:

          [Sales Team] has:

     

    [None]

    [default]

    [Contributor]

    [Viewer]

    User intent: I want to make sure that anonymous don't see my stuff but I don't care about users with accounts. I'm working with JohnSmith so he needs to contribute but sales can track progress.

     

    Rights for 'Everyone' determines restriction

     

    [ ] Default user permissions
        ____________________

    [x] Custom user permissions:

          Everyone has:

          [JohnSmith] has:

     

    [None]

    [Contributor]

     

    This is a page that only JohnSmith can contribute to.

     

    Inheritable default permissions

    Restrictions are eliminated. Page grants override global user/group permissions. 

    Upgrade:

    • Pages with public (or no) restriction: nothing changed for upgrades
    • Pages with private restriction: Grant added to group 'Logged in users' with permissions of None
    • Pages with semi-public restriction: I have no idea :(

     

    Grants are additive

     

    [ ] Default user permissions

        ____________________

    [x] Custom user permissions:

          Logged in users have:

          Guest users have:

          [JohnSmith] has:

          [Sales] have:

     

    [Viewer]

    [None]

    [Contributor]

    [Viewer]

    Everyone can view except for anonymous users. JohnSmith who is part of sales can contribute and the rest of sales can view.

    Tag page
    What links here

    Files 0

    Attach file or image
     
    You must login to post a comment.
    MindTouch Social Knowledge Base

    Copyright © 2011 MindTouch, Inc. Powered by