Changes between Version 37 and Version 38 of BluePrintAuthorization

Timestamp:

06/19/10 17:38:45 (15 years ago)

Author:

Fran Boon

Comment:

--

BluePrintAuthorization

@@ -252 +252 @@
 
 === Anonymous authoring ===
-Some tables should be writable by unauthenticated users ({{{writable=|0|}}})
- * Need special handling for this in {{{shn_create}}}/{{{shn_update}}}?
-  * Might need to differentiate the 2 (can deposit new but not edit existing)
+Some tables should be writable by unauthenticated users
+ * Need to differentiate the 2 (can deposit new but not edit existing)
+ * Function {{{shn_has_permission()}}} above handles this by setting ({{{writable=|0|}}})
  * Might want to be have new records by unauthenticated users not be visible in lists until an admin has approved them
+  * Add a new field 'approved', which default to 'False' for unauthenticated users
+  * Filter for this: {{{query = query & (table.approved == True)}}}
+   * Q: Do we keep this in individual controllers
+    * manual & need to check additional functions like Sync
+   * Q: Do we do check globally within {{{shn_accessible_query()}}} & {{{shn_has_permission}}}
+    * means extra logic every CRUD check when most resources don't need this
+   
 
 === Visibility of Options ===