Note: Roles are sometimes called groups, and users are sometimes called visitors. Basically there are users, roles and permissions. A user can have one or more roles. The permissions assigned to the roles (NOT to user). More information about this can be found in the Turbine FSD.
Name of the Role | Short Description |
root: | Role with all permissions |
user_admin: | Role which handles the user administration |
admin: | Role with all add_*, modify_*, release_* permissions, but usually no user_admin permissions. |
trusted_user: | Role which can be assigned more permissions to (e.g. add_* and modify_*, ...) |
authenticated_user: | Default role for users with a valid email address. Typically there
are two cases:
|
guest: | Role with no special Permission (can only see the entries) |
Feel free to assign the permissions according your taste. But take special care about what you assign to the role of the 'authenticated_user' and to the 'guest' role. Everybody with a valid email address can get the role of an 'authenticated_user' and everyone can login as a guest without a password. A special status has the 'user_admin' role. Currently there are no permissions assigned to the 'user_admin' role (in the application the name of the role is checked). It is not recommended to add any non user administrator permission to this role. For the case you want the same user to have e.g. 'user_admin' and 'trusted_user' rights, you could simply assign the user those two roles. It is always possible to create more roles.
Name of the Permission | Short Description |
add_*: | This permission is required to add new entries, which do not have to be released by a moderator. The add_* permission overrides the corresponding add_unreleased_* permission. |
add_unreleased_*: | This permission is required to add new entries, which have to be released by a moderator before they are visible for everybody. |
modify_*: | With this permission it is possible to modify or delete any entry. |
modify_own_*: | With this permission it is possible to modify or delete those entries, which were created by him/herself. |
modify_own_unreleased_*: | With this permission it is possible to modify or delete those entries, which were created by him/herself and which are not yet released. |
see_unreleased_*: | With this permission it is possible to see the unreleased entries of
the other users.
Remark: A user can always see his/her own unreleased entries. |
release_*: | This permission is required to release entries. With the release permission it is also possible to see all the unreleased entries. |
On Win32, you should use the .bat version of the file and on Unix you should use the .sh version of the file.
More information about the specifics of this can be found in the document INSTALL.txt.
Table Name | Description | Project |
Permission: | Maps the permission id's to permission names. | Turbine Table |
RolePermission: | Maps the role id's to the permission id's. | Turbine Table |
UserRole: | Maps the user id's to the role id's. | Turbine Table |
Visitor: | Contains the visitor information, such as name, email, etc. Here you can find also the visitor id. | Turbine Table |
VisitorRole: | Maps the visitor id's to the role id's | Turbine Table |
answer: | Contains the answers and related information. | Jyve Table |
faq: | Contains the FAQ's and related information. | Jyve Table |
project: | Contains the projects and related information. | Jyve Table |
question: | Contains the questions and related information. | Jyve Table |
topic: | Contains the topics and related information. | Jyve Table |
mysql> SELECT VISITORID,LOGINID,FIRST_NAME,LAST_NAME FROM Visitor;
mysql> SELECT * FROM UserRole;
mysql> SELECT * FROM Permission;
mysql> SELECT * FROM VisitorRole;
mysql> SELECT * FROM RolePermission;
mysql> INSERT INTO Visitor (LOGINID, FIRST_NAME, LAST_NAME, PASSWORD_VALUE, MODIFIED, CREATED, LASTLOGIN, CONFIRM_VALUE ) VALUES ('testuser', 'Eva', 'Miller', 'secret', null, null, null, 'CONFIRMED' );Of course you could fill in time values instead of null, if you feel like.
mysql> INSERT INTO UserRole SET ROLENAME='trusted_user';The ROLEID will be set automatically. See also: Get role id.
mysql> INSERT INTO Permission SET PERMISSION='release_project';The PERMISSIONID will be set automatically. See also: Get permission id.
mysql> INSERT INTO VisitorRole SET VISITORID=3, ROLEID=8;See also: Get visitor id, Get role id.
mysql> INSERT INTO RolePermission SET ROLEID=2, PERMISSIONID=11;See also: Get role id, Get permission id.
mysql> DELETE FROM VisitorRole WHERE VISITORID=3 AND ROLEID=8;See also: Get visitor id, Get role id, Get assignments visitor - role.
mysql> DELETE FROM RolePermission WHERE ROLEID=2 AND PERMISSIONID=11;See also: Get role id, Get permission id, Get assignments role - permission.
Copyright (c) 2000 The
Java Apache Project.
$Id: visitors_roles_permissions.html,v 1.2 2000/03/17
02:50:04 jonbolt Exp $
All rights reserved.