[ZDP] BackTalk to Document The Zope Book (2.5 Edition)/Users and Security

webmaster@zope.org webmaster@zope.org
Wed, 09 Oct 2002 22:28:50 -0400


A comment to the paragraph below was recently added via http://www.zope.org/Documentation/Books/ZopeBook/current/Security.stx#3-93

---------------

      When you create users at this higher level, you should not give them
      the *Manager* role, but instead give them Scientist or SalesPerson as
      appropriate. Then you should set the security policies.  On the
      *Science* folder the *Scientist* role should have the equivalent of
      *Manager* control. On the *Sales* folder, the *Salesperson* role
      should have the same permissions as *Manager*. Finally on the
      *AdsWithComplexWarnings* folder you should give both *Scientist* and
      *Salesperson* roles adequate permissions. This way roles are used not
      to provide different levels of access, but to provide access to
      different locations based on who you are.

        % Anonymous User - Oct. 9, 2002 10:28 pm:
         Just to clarify: do you grant the extra permissions on the Science and Sales, and AdsWithComplexWarnings,
         folders using "local roles"?