History: Permission Management
Source of version: 5
Copy to clipboard
A profile would not be very useful if it could not grant rights appropriately for groups. Profiles allow to create groups and to modify the permissions of existing groups using a unified syntax.
The permissions block is a top level block.
{CODE(caption=>Permission block structure sample,wrap=>1)}
preferences:
...
permissions:
Anonymous:
allow: [ export_wiki ]
Registered:
description: Will be ignored because group is already created
allow: [ edit, minor ]
deny: [ export_wiki ]
Moderators:
description: Trusted users watching the recent changes to avoid spam
allow: [ rollback ]
include: [ Registered ]
objects:
-
type: forum
id: $moderator_discussion_forum
allow: [ forun_post, forum_post_topic, forum_read ]
objects:
...
{CODE}
As you can see, the ''tiki_p_'' prefix was removed from the permission names to reduce the length and increase readability.
Permissions can be set to specific objects as long as the ID is known or it was also created by a profile using ObjectReferences. The object type does not have to be supported by TikiProfiles, but a static ID will have to be provided.
The include property can be a single value or an array.