FLUID-757: Create pattern editor role for OSDPL & adjust permissions

Metadata

Source
FLUID-757
Type
Sub-task
Priority
Minor
Status
Closed
Resolution
Fixed
Assignee
Jonathan Hung
Reporter
Allison Bloodworth
Created
2008-06-10T16:45:28.000-0400
Updated
2008-06-23T16:59:54.000-0400
Versions
N/A
Fixed Versions
  1. 0.4
Component
  1. OSDPL

Description

Currently we are just approving everyone who requests an account automatically, and anyone with an account can edit patterns, which is not safe. Let's create a "pattern_editor" role and give that only to select people with accounts on the site that we know (e.g. the Fluid UX team) whose identity we can verify by looking at the email address. For now, we probably want anyone with an account to be able to submit patterns and edit their own patterns. Check out the other permissions as well to make sure we aren't giving authenticated users (whose identity we aren't verifying) too many permissions.

Comments

  • Allison Bloodworth commented 2008-06-10T16:45:40.000-0400

    iteration11

  • Jonathan Hung commented 2008-06-12T15:49:25.000-0400

    Created the Pattern Editor role for users and changed the Authenticated User role. For a summary of the current access permissions, see this link:
    http://osdpl.fluidproject.org/admin/user/access (must be an administrator to view / edit).

    For the Authenticated User:

    • reduced access to modules / features not required.
    • can create and edit own Design Patterns, forum posts, comments, images, and user profile.
    • can't edit anyone else's content.

    For Pattern Edtior:

    • can't edit any other user's content except Design Patterns and images
  • Allison Bloodworth commented 2008-06-21T02:04:01.000-0400

    Since we've now reduced the permissions for any user who is not an administrator, we want to give pattern editor permissions to anyone who is on the Fluid UX team. I just did this to finish up this task.