[dev] Horde Perms

Jan Schneider jan at horde.org
Sat Aug 13 13:44:14 UTC 2011


Zitat von goncalo.queiros at portugalmail.net:

> Hi there.
>  Started to dedicate some attention to Horde Perms, and there seems to be
> some odd behaviors with it:
>
>  - If i give to user A permission to kronolith:max_events = 2, he will be
> able to create only 2 events, but every other user won't be able to create
> any event.
>  I then give all authenticated users permission to create 5 events, and my
> user A will now be able to create 5 events too. Digging the code i saw that
> Horde_Perms just returns to Kronolith an array('2', '5'), and then
> Kronolith uses the max of the array.
>  As a user pointed on the IRC, i could add all users to a group, give that
> group permissions to create 5 events, and give user A permission to create
> 2. While this would probably fix the problem, it doesn't seem right because
> every time a user registers i would need to add him to this group.

There's nothing odd about this. Permissions are additive. You cannot  
further restrict permissions that a user gained by other permissions.

>  - There seems to be no way to deny the imp:folder_create permission to a
> specific group or user. While i can deny to all authenticated users by just
> adding the permission, i don't see any way of denying it to a specific user
> or group.

See above.

Jan.

-- 
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/



More information about the dev mailing list