[Plone-UI] workflow issues

Dylan Jay djay at pretaweb.com
Tue Aug 13 00:07:14 UTC 2013


On 13/08/2013, at 1:52 AM, ida277 <contact at ida-ebkes.eu> wrote:

> Dylan Jay wrote
>> I think I derailed the conversation by talking about solutions. 
>> I was really just interested to find out how many others also see sharing
>> and roles as usability problems in Plone?
> 
> Hi Dylan Jay,
> 
> what Chris Ewing was trying to hint to is, that usually you don't want an
> inheritage-blocking to be overtrumped by a global role, it opens up
> unforeseeable leaks, which are difficult to keep in control *because* it
> breaks blocked inheritage. That's why it's recommended to avoid global
> assignments unless for very special reasons, like an administrator, who
> should be able to access and manipulate anything, no matter what the
> permission-policies are.
> 
> So concerning the UI it is perfectly fine, that the assignment of
> global-roles lives in the controlpanel for Managers only, I think.


It's still confusing I think. It's not obvious that setting "Contributor" in site setup trumps "Can Add" in any sharing tab.




> 
> HTH, Ida
> 
> 
> 
> --
> View this message in context: http://plone.293351.n2.nabble.com/workflow-issues-tp7567098p7567166.html
> Sent from the User Interface & Design mailing list archive at Nabble.com.
> _______________________________________________
> UI mailing list
> UI at lists.plone.org
> https://lists.plone.org/mailman/listinfo/plone-ui



More information about the UI mailing list