Closed (fixed)
Project:
GraphMind
Version:
6.x-1.x-dev
Component:
Miscellaneous
Priority:
Normal
Category:
Feature request
Assigned:
Reporter:
Created:
22 Sep 2009 at 14:44 UTC
Updated:
21 Nov 2009 at 08:10 UTC
Hello Peter,
I think the permissions for Graphmind are not implemented or not correctly implemented at the moment.
Set none permissions for editing any Graphmind but stil editing and saving of admins Graphmind is possible.
Wim
Comments
Comment #1
itarato commentedHi Wim,
Yes, that is true. Currently I'm concentrating on features and stability. At the access point of view, I want to use the normal node-style access rights: create, edit, delete - own or/and any. It means it needs 3 views:
- create and import
- only view (shows all the data on a mindmap)
- edit (can create new mindmap nodes and load data from the Drupal site)
What I don't know, what shall I do with attributes. Because that can contain confidential data. Maybe it is best to let user decide about what he/she want to load. Also views is highly customizable, it is easy to provide only data everybody is allowed to see.
What do you think?
Cheers,
Peter
Comment #2
itarato commentedHi,
I commited the initial code for handling access rights. Now you can use the normal (type of graphmind) node permissions. If the user has create and edit rights, the mindmap has all the control elements. If user can only view a mindmap, it shows a static mindmap, and the user can't modify anything. If user neither has a view right than the general access denied page loads.
Regards,
Peter
Comment #3
itarato commented