Index: openacs-4/packages/acs-core-docs/www/permissions-tediously-explained.html =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/permissions-tediously-explained.html,v diff -u -r1.44 -r1.44.2.1 --- openacs-4/packages/acs-core-docs/www/permissions-tediously-explained.html 17 Oct 2010 21:06:08 -0000 1.44 +++ openacs-4/packages/acs-core-docs/www/permissions-tediously-explained.html 12 Jun 2011 20:03:48 -0000 1.44.2.1 @@ -1,5 +1,5 @@ -OpenACS Permissions Tediously Explained

OpenACS Permissions Tediously Explained

+OpenACS Permissions Tediously Explained

OpenACS Permissions Tediously Explained

by Vadim Nasardinov. Modified and converted to Docbook XML by Roberto Mello

The code has been modified since this document was written so it is now out of date. See this forum thread.

Permissions Overview

Who (grantee_id) can do what @@ -105,7 +105,7 @@

Context Hierarchy

Suppose objects A, B, ..., and F form the following hierarchy. -

Table 11.2. Context Hierarchy Example

A

+

Table 8.2. Context Hierarchy Example

A

object_id=10

B

object_id=20 @@ -121,7 +121,7 @@ This can be represented in the acs_objects table by the following entries: -

Table 11.3. acs_objects example data

object_idcontext_id
2010
3010
4020
5020
6030

+

Table 8.3. acs_objects example data

object_idcontext_id
2010
3010
4020
5020
6030

The first entry tells us that object 20 is the descendant of object 10, and the third entry shows that object 40 is the descendant of object 20. By running a CONNECT BY query,