Index: openacs-4/packages/acs-core-docs/www/xml/kernel/permissions-requirements.xml =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/xml/kernel/permissions-requirements.xml,v diff -u -N -r1.4 -r1.5 --- openacs-4/packages/acs-core-docs/www/xml/kernel/permissions-requirements.xml 20 Aug 2003 16:20:19 -0000 1.4 +++ openacs-4/packages/acs-core-docs/www/xml/kernel/permissions-requirements.xml 11 Dec 2003 21:39:50 -0000 1.5 @@ -5,10 +5,10 @@ %myvars; ]> -OpenACS 4 Permissions Requirements +Permissions Requirements -by John McClary Prevost +By John McClary Prevost @@ -104,7 +104,7 @@ Examples of the essential question addressed by the Permissions system: -Can jane@attacker.com delete the web security bboard? Can the Boston office +Can jane@attacker.com delete the web security forum? Can the Boston office (a party) within the VirtuaCorp intranet/website create its own news instance? @@ -167,7 +167,7 @@ Privileges must be designed with appropriate scope for a given OpenACS package. Some privileges are of general utility (e.g. "read" and "write"). Others are of more limited use (e.g. "moderate" -- applies mainly to a package like bboard, where many users are contributing +- applies mainly to a package like forum, where many users are contributing content simultaneously). A package defining its own privileges should do so with moderation, being careful not to overload a privilege like "read" to mean too many things. @@ -192,8 +192,8 @@
70.10 Context There must be a method for objects to receive default access control from -some context. For example, if you do not have read access to a bboard, you -should not have read access to a message in that bboard. +some context. For example, if you do not have read access to a forum, you +should not have read access to a message in that forum.
70.20 Overriding @@ -205,7 +205,7 @@ It must be possible to allow a party more access to some target than they would get by default. (For example, a user does not have the right to edit -any message on a bboard. But a user does possibly have the right to edit +any message on a forum. But a user does possibly have the right to edit their own messages.)
70.20.20 Negative Overriding