[cvs] [Wiki] changed: HordeGPO

[Ben Chavet]

ben  Wed, 03 May 2006 19:51:12 -0700

Modified page: http://wiki.horde.org/HordeGPO
New Revision:  1.4
Change log:  ideas from mailing list

@@ -47,11 +47,17 @@
 * If pref_uid is set, the pref is a user pref
 * if HGPO is set, it is a HGPO pref
 * what happens if both are set?
 
-**horde_gpo** table: {{HGPO_ID, HGPO_name, HGPO_target, HGPO_target_type, HGPO_override_user_settings}}
+**horde_gpo** table: {{HGPO_ID, HGPO_name, HGPO_target, HGPO_target_type, HGPO_overridable}}
 
 * link horde_gpo::HGPO_ID to horde_prefs::HGPO to get a list of prefs belonging to a given HGPO.
+
+----
+
+++ Cache
+
+At login, all applicable GPO's should be loaded and cached.  We should also try to do something to cache GPO's for guest sessions.
 
 ----
 
 ++ Other Thoughts
@@ -64,4 +70,31 @@
 
 ++ Links
 
 http://www.microsoft.com/technet/itsolutions/msit/security/grppolobjectmgmt.mspx - gives a good overview on how MS GPO's work, and a nice graphic that really helped me visualize the internal workings.
+
+----
+
+++ Cut & Paste from mailing list until I can better organize my thoughts
+
+> - with something like this in place I think it would make more and
+> more sense to move everything that's at all user-related in conf.php
+> files to this system. Things like "user capabilities" in both Horde
+> and IMP - they can even be locked (overridable =3D false?) by default,
+> but letting people easily manage them on a per-group basis, or
+> whatever, sounds very good to me.
+
+Just brainstorming here, but we could even go a step further and use =20
+this type of system for all of the configs (except for maybe the very =20
+basic stuff, like authentication).  Doing so would let different =20
+groups have different configs, which might be helpful for sites =20
+hosting for various groups.
+
+> If there were a way to manage, say, IMAP server configs, or other
+> backend configurations (sieve servers, etc.) using this system, that
+> would be even better.
+
+Yes!  We could put IMAP server configs, etc. in a GPO and assign to =20
+targets as necessary.  Same way that printers can be assigned in an =20
+active directory.  "group A uses this IMAP server, group B uses this =20
+other IMAP server, group C gets to specify their own IMAP server." The =20
+possibilities are endless! I love it!