[dev] About whups permissions and whups:admin

[Mathieu CLABAUT]

  Hello,

  (I post this on devel as I didn't subscribe to whups. Tellme I you feel
  it very inconvenient, I'll then made the effort to subscribe a time
  long enough to see this thread answered.)

   I'd like to share some questions I have about whups and administration
   rights.

   At first, I needed to give administration rights for whups to somebody
   which has non need to have administration rights over the whole horde
   framework. I tried to set up an whups:admin permission, but was unable
   to set it without modifying
   whups/lib/api.php:_whups_getTicketDetails() by applying the following
   patch given bellow.

   Then the user newly privileged was unable to see the existing queues.
   I need for each queue to give him admin privileges.

   I indeed see teh following comment in
   lib/Whups.php:permissionsFilter() :
       // We purposely DO NOT use Auth::isAdmin('whups:admin') here,
       // since admins local to Whups still need to be granted
       // permission to the queues that they will administer.

   I understand that it may be a welcomed feature to distinguish between
   Horde:admin, whups:admin and queue:admin, but why not introduce
   another level, and let whups:admin have the same privileges than
   Horde:admin on whups ?

   Please tell me if I have well understand that the role of
   Any_Horde_Application:admin is to give a user sufficient privileges to
   administer the whole Any_Horde_Application as if he was the global
   Horde Administrator ?

   If not, how can I give such a privilege to a selected user ?

   -mat



Index: api.php
===================================================================
RCS file: /repository/whups/lib/api.php,v
retrieving revision 1.76
diff -u -b -B -w -r1.76 api.php
--- api.php     4 Nov 2004 18:14:39 -0000       1.76
+++ api.php     24 Jan 2005 13:30:48 -0000
@@ -618,6 +618,9 @@
      $perms['tree']['whups']['hiddenComments'] = false;
      $perms['title']['whups:hiddenComments'] = _("Hidden Comments");

+    $perms['tree']['whups']['admin'] = false;
+    $perms['title']['whups:admin'] = _("Administration");
+
      $perms['tree']['whups']['queues'] = array();
      $perms['title']['whups:queues'] = _("Queues");



--
________________http://www.gnu.org/philosophy/no-word-attachments.fr.html
Mathieu CLABAUT                            mailto:mathieu.clabaut at free.fr
            F2F5 442F F2AC E1D5 9D31  3EFC 842A BC4A 123B 9A65