Page 1 of 1
More grants needed than read & write ?
PostPosted:Sat Jan 12, 2008 7:32 pm
by jllort
Actually OpenKM has only two general privileges, Read and Write ones.
Any user with write grant can change permissions on documents or folders to other users, for example adding more users or removing.
It\'s necessary to create a specific permission for changing grants to documents and folders.
Any other grants ... what about it?
Re:More grants needed than read & write ?
PostPosted:Tue Jan 15, 2008 7:44 am
by wgualla
Yes, of course. Any user who have write permission on any folder can add other user to the writer & reader list. Can cut off himself (accidentaly) from that lists.
Right now I need a write permission on folders but no delete permission. Something like the sticky bit on linux directory in the /tmp. (I can create doc & folders, read others docs & folders but I can delete only my own ones).
Re:More grants needed than read & write ?
PostPosted:Wed Jan 30, 2008 7:55 am
by peter
i think that a Modify permision woul be usefull. this would give users the right to read and edit a documnt but stop them from deleting a document. on folder level this should give permision to edit folder names and/or create subfolders??
anyway the goal is that a usr can change existing documents and folders(create,move?,copy?) but cannot delete excisting ones?
Re:More grants needed than read & write ?
PostPosted:Wed Jan 30, 2008 9:14 am
by jllort
Next jackrabbit version 1.4 has some new goals on permission that we\'ll try to use.
We think that modify permision must be something separated that tradicional read, write, but we want to still mantaining a esence, make easy = make useful.
We think it\'s not a good idea to introduce more grants, we don\' want to obfuscate end user. We think delete, copy, and move are implicit grants with write permission like on traditional OS, we\'re inspirited on it. The end user trash tries to recover user errors.
Re:More grants needed than read & write ?
PostPosted:Fri Feb 29, 2008 11:07 am
by frankie
If the permission option set to read only, Can openkm don\'t let user save the document on their pc ,just let them view the document on a document viewer?
This is because many companies don\'t want their staff to save comapany private document when they are at home.
Re:More grants needed than read & write ?
PostPosted:Fri Feb 29, 2008 8:54 pm
by jllort
This could be solved really easilly.
It could be a configuration parametres that disables this option ( OpenKM.cfg ). By default if this parameter is not set the read option it\'ll be enabled.
I\'ll put this enhancement on our tracking system for future OpenKM release, in 2.0 it\'ll not still be included.
The only problem I see is that on company, staff could not download files with read grant too.
What you think about it ?
Re:More grants needed than read & write ?
PostPosted:Sat Mar 01, 2008 3:09 am
by frankie
The Document view that i mention is like this
http://www.scribd.com
or
http://vuzit.com/
or
http://view.samurajdata.se/(opensource)
or could it be done this by popup an IE when user click download to prevent client save the document like the following example?
http://www.dynamicdrive.com/dynamicinde ... viewer.htm
Do you think google web toolkit can do that?
Most company don\'t want to disclose their document when their staff at home, how this could be solve?
Thank you