helpphpGroupWare - Support: sr #100483, User visibility and domain support

 
 

You are not allowed to post comments on this tracker with your current authentication level.

sr #100483: User visibility and domain support

Submitted by:  None
Submitted on:  Mon 25 Feb 2002 08:23:37 PM UTC  
 
Category: Question - NOT BUG REPORTPriority: 5 - Normal
Severity: 2 - MinorStatus: None
Privacy: PublicAssigned to: None
Originator Email: -unavailable-Open/Closed: Open
Operating System: None

Sat 07 Dec 2002 03:51:01 AM UTC, comment #4:

I have allocated this one to our ldap dev ... he will have a
look at it and get back to you on it.

Dave Hall <skwashd>
Project Administrator
Sat 07 Dec 2002 01:32:03 AM UTC, comment #3:

Easy. When you log in, every single user that has an
account in the system is visible to every single other
user. Not only that, but you can tell what groups a user
belongs to, and because the original system uses membership
groups for role administration, belonging to a group
automatically determines the role the user has.

The patches I created have the following attributes:

a) Opaque groups where membership is not visible, so rights
can be assigned anonymously, so that users can't complain
that one user has a higher level of access than another.

b) All users can see each other in the directory. In my
patch, only users in common groups other than opaque groups
can see each other.

There really is no need for all users to know who is in the
Ops group.

And if users are from 2 separate domains on the same
machine, there is no need to have 2 separate databases.
Since membership visibility is governed by common
membership, if all users for each domain belong to a
particular group, then only those users that are in that
particular group can see each other.

Example:

Corporate system: Purchasing, Quality and Accounting.
Although each of these groups is part of the same
organization, they each have their own administration
protocols, and so they shouldn't necessarily be able to see
everyone in the contact database. Just those people they
should be able to get in touch with. Should there be a need
to email directly, they can do so, but not just at random.

Privileged system: Different users on a dating site in
different areas, romance, or just plain dating shouldn't be
able to see each other unless they belong to the right
community.

And so on and so forth.

The HR application, just assumes that everyone should be
visible. Period.

What if some users should remain privileged???

Am I shedding any light?

P.S. As far as domain support, how do you support multiple
domains in PHPGroupWare natively in the same database????

And if it's not in the same database, you DO realize you're
setting up a headache for maintenance now, right? :)

Thanks!!! :)

Shamim

Anonymous
Fri 30 Aug 2002 10:20:10 AM UTC, comment #2:

If you look in patch 434, I have created groups that allow
opaque membership, so that only transparent groups allow
you to see who else is in the group.

This allows for groups that assign 'roles' to not have to
broadcast their members to the users.

Most applications honor the groups and the memberships
therein.

The HR application on the other hand does not. It simply
shows you everyone in the system.

When PHPGroupware is set up for multiple domains, do you
need multiple databases to support the extra domains?

And how do you prevent users of one virtual domain from
seeing users in a different virtual domain?

One way would be to make the HR application honor the group
membership and to automatically make all users of a single
virtual domain, belong to a initially to a group with the
same name as their domain. when the account was created.
This group would be ONLY for HR group usage and those
people in the HR group would be visible to others in the
same group. Just like we have for the Time_Track facility.

P.S. How do I get patch 434 incorporated into the main
tree??

Thanks!!!

Anonymous
Fri 30 Aug 2002 01:02:56 AM UTC, comment #1:

Hi,

phpGW does support multiple domains.

As for "How come all users are by default available in the
user directory?" I am not really sure what you. Could you
please explain and I'll try to answer the question

Cheers

skwashd

Dave Hall <skwashd>
Project Administrator
Mon 25 Feb 2002 08:23:37 PM UTC, original submission:

How come all users are by default available in the
user directory?

Is there any plan for for visibility to be
controllable?

Secondly, how do I make use of the multiple domain
feature of PHPGroupware? I can make users select a
domain but it never has anything in it except
for "default".

Thanks.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 2 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Thu 12 Feb 2004 07:54:14 AM UTCpowerstatAssigned toInvalid User ID=>None
Fri 06 Dec 2002 11:11:43 PM UTCskwashdAssigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1