Workflow-ng integration for ACL
Putting it here, for people to comments and review.
> Hi,
> Please review this tutorial, I hope it's better, implementation-wise, then
> last one :)
> http://drupal.org/node/203377
Yep, that sounds like a cool use case.
I'd suggest that we write the tutorial, so that the nodes always keep
visible for everyone. For that we need content access and set it to
allow anonymous + authenticated users to allow view access.
-> Probably you have that already, but I can't find your figure 1?
Then you are adding all user to the ACL at user login - this is not
optimal. I think, we should improve that. However, this won't be
simple :(
I think what we need for hat would be
* content access workflow-ng integration including priority, so that
one can set content access per node access control (role based!)
* acl node access priority support
This all node access stuff isn't that simple :( I should have another
look at simplifying content access + acl collaboration.
So this should be the goal, however upgrading the configuration from the
old one won't be easy I think.
regards,
fago
Few thoughts
Few thoughts, probably needs more attention to details:
How about reserving ACL name 'anonymous' and 'authenticated', to include all users? So we don't need an action to add users one by one?
Currently from what I see is that ACL comes on top of CA (Content Access). (i.e. ACL OR CA).
Maybe we need something like a checkbox giving the option of having ACL AND CA. for example:
If CA allows View and Edit (By role)
and ACL allows only view then user will be able to only View.
Cheers Amitai
@Fago - Regarding the tutorial, images are there, but you will need to change input format to 'full HTML', I have no access to it.
hi
1) is covered by the content access module, as it does access control per role. As I've written, we could need workflow-ng integration there too.
2) Both modules just write node access grants by using drupal's node access API. Which grants "win", is decided by the priority. If the priorities are equal, both grants apply. -> As I've written, we need ACL supporting the priority value, then one can adjust which module should "win".
GHOP
maybe you can propose it for GHOP?