Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Note

We structure the permissions definitions in terms of questions to be answered. The permissions below are what we are actually implementing in the code right now.

 

Wall

...

, a checkbox means we have implemented it (smile)

Wall Post

members
Wall ContextConditioncreatecommentreadeditmoderatedeleteadminx
Useralways
  •  userowner of wall
  •  registered users
  •  userowner of wall
  •  owner of post
  •  
 
  • owner of wall
  •  owner of post
 
  if profile visibility "public"  
  •  everyone
   
   if profile visibility "registered users"  
  •  registered users
   
   if profile visibility "communities"  
  •  communities of user
 
   
  if profile visibility "connected users"  
  •  users connections
   
   if profile visibility "private"  
  •   
   
Groupalways
  •  members
  •  members
Groupalways 
  •  members
  •  owner of post
  •  owner of post
  •  (more via teams)
 
 teams     
  •  with x wall action

Group

Users in a group don't have any special permissions. To have any permission they need to be in a team with the appropriate action.

TypeConditioncreatedeleteeditjoinmanage teamsx 
Communityalways
  •  registered users
  •  users in team with "superadmin" action
  •  users in team with "superadmin" action
  •  registered users
  •  users in team with "superadmin" action
  
All groupsalways
  •  users in group team with "create" action
  •  users in group team with "delete" action
   
  •  with x wall group action
 

Group Actions

is_content_included_in_parent" on group
ActionDescription
editrename group, change description, change picture, change category of group, keywords, change region
manage teamscreate new team, edit team, delete team, add action, remove action (note: at some point we need to distinguish which actions are able to be granted, e.g. POSSIBLY if you can "manage teams" yourself, this should not let you give others the "manage teams" permission... needs more discussion... can an admin make other people admin?)

Group team defaults

When a subgroup is created, it will have some teams and actions created by default.

  •  members of all parents
Team Namecreatedeleteeditmanage teams  
admin✓?✓?   
superadmin✓?✓?✓?✓?  

 

Not represented things

  • if the wall is for a team, and the team is for a group, and that group has another team with "<some kind of special super admin>" permission, then:
    • TBC