enhance user management and permissions

[jens]

We need a enhanced user management and permissions system:
http://trac.pylucid.net/ticket/147

First step, use the basic django user types:

-Anonymous (User how is not logged in)
-is_staff - can access the admin site
-is_superuser - has all permissions without explicitly assigning them

http://www.djangoproject.com/documentation/authentication/#users

Second step: Use the django group_permissions:
http://www.djangoproject.com/documentation/authentication/#permissions

At the moment, we use only two kinds of user:
user with access to the Django admin interface and user without access to it.
http://pylucid.org/_goto/122/User-Managment/

We have the two plugin variable "must_login" and "must_admin"...
A user can access a "must_admin" method if he is_staff or is_superuser. That's not the best way.

This should be changed in v0.8.1
_________________

http://www.jensdiemer.de | http://www.htfx.de | http://www.python-forum.de

[sepharim]

Can we create own groups already? Something like that would be nice too, so that you can create pages/folders where a defined group of users can write.

Not for 0.8.1 but to keep in mind for later

[jens]

Yes, you should be able to build user groups. Its a features inherited from django.
But i never test this. The usergroups did nowhere recognize in PyLucid, yet.
_________________

http://www.jensdiemer.de | http://www.htfx.de | http://www.python-forum.de

[rantaaho]

It is something that I plan to implement as soon as I find time for it...

[sepharim]

Then i'm not alone with searching time for it

[jens]

The time is the limited factor, for everything
_________________

http://www.jensdiemer.de | http://www.htfx.de | http://www.python-forum.de

[jens]

I created a Wiki page for collection ideas around this:

http://trac.pylucid.net/wiki/UserPermissions

Please contribute
_________________

http://www.jensdiemer.de | http://www.htfx.de | http://www.python-forum.de