[Tickets #9350] Re: Finer grained Admin privileges through permission api

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9350
------------------------------------------------------------------------------
  Ticket             | 9350
  Updated By         | Ralf Lang (B1 Systems GmbH) <lang at b1-systems.de>
  Summary            | Finer grained Admin privileges through permission api
  Queue              | Horde Base
  Version            | Git master
  Type               | Enhancement
  State              | Assigned
  Priority           | 1. Low
  Milestone          | 4.1
  Patch              | 1
  Owners             | Horde Developers
------------------------------------------------------------------------------


Ralf Lang (B1 Systems GmbH) <lang at b1-systems.de> (2011-05-18 08:36) wrote:

> If you want to be able to actually assign these new permissions to  
> users/groups in Horde, i.e. via Administration->Permissions, then  
> they have to be added to the permission tree of the horde  
> application. You can do that by applying the attached patch to  
> lib/api.php. The patch was created for horde 3.3.8. You might need  
> some fuziness when applying it to other versions of horde.
>

I have discussed this with Jan on LinuxTag and it looks like porting  
finer grained Admin to Horde4 would require some change:
Either
1) we need AppInit without the admin flag and then manually check if  
admin flag OR a specific permission is set
or
2) we enhance AppInit and allow it to check for the required permission.

Provided there is a decision which way to go, I would volunteer.