How do I manage 'private' objects w/custom wf?

4 messages Options
Embed this post
Permalink
aclark () How do I manage 'private' objects w/custom wf?
Reply Threaded More More options
Print post
Permalink
Hi all,

I've got a product that aims to use workflow to manage state
for 'todo item':
    - http://svn.plone.org/svn/collective/Products.todo/trunk/

I.e. 'done' or 'not done'

Works well, but I just noticed that my todo items are all visible
to anonymous, how do I fix this?

I'm guessing maybe I need to remove a permission on that wf state…

Thanks,

--
Alex Clark · http://aclark.net
Buy Practical Plone 3: http://tinyurl.com/practical-plone


_______________________________________________
Product-Developers mailing list
[hidden email]
http://lists.plone.org/mailman/listinfo/product-developers
Dylan Jay () Re: How do I manage 'private' objects w/custom wf?
Reply Threaded More More options
Print post
Permalink

On 14/07/2009, at 5:27 PM, Alex Clark wrote:

> Hi all,
>
> I've got a product that aims to use workflow to manage state
> for 'todo item':
>    - http://svn.plone.org/svn/collective/Products.todo/trunk/
>
> I.e. 'done' or 'not done'
>
> Works well, but I just noticed that my todo items are all visible
> to anonymous, how do I fix this?
>
> I'm guessing maybe I need to remove a permission on that wf state


You can either have it controlled by workflow in which case in your  
definition.xml of your todo_workflow, edit the state definitions to  
override permissions.

for instance.

  <state state_id="done" title="Done">
   <description>Done</description>
   <exit-transition transition_id="redo"/>

   <permission-map name="View" acquired="False">
    <permission-role>Owner</permission-role>
   </permission-map>

  </state>


or you can just set your lower level view permissions to be more  
restrictive. In which case you want to make sure your workflow doesn't  
override the view permissions.


> Thanks,
>
> --
> Alex Clark · http://aclark.net
> Buy Practical Plone 3: http://tinyurl.com/practical-plone
>
>
> _______________________________________________
> Product-Developers mailing list
> [hidden email]
> http://lists.plone.org/mailman/listinfo/product-developers


_______________________________________________
Product-Developers mailing list
[hidden email]
http://lists.plone.org/mailman/listinfo/product-developers
Raphael Ritz () Re: How do I manage 'private' objects w/custom wf?
Reply Threaded More More options
Print post
Permalink
In reply to this post by aclark
Alex Clark wrote:

> Hi all,
>
> I've got a product that aims to use workflow to manage state
> for 'todo item':
>     - http://svn.plone.org/svn/collective/Products.todo/trunk/
>
> I.e. 'done' or 'not done'
>
> Works well, but I just noticed that my todo items are all visible
> to anonymous, how do I fix this?
>
> I'm guessing maybe I need to remove a permission on that wf state…

Why don't you play around in ZMI with the workflow tool a bit.
You'll find that you can define yourself which permissions to
manage by each individual workflow, find how to set those permissions
for the different states (states have a 'permissions' tab too which
is different from the tool's one) and so on.

Once happy with what you came up with you can export the workflow
definition using GS (portal_setup).

Last but not least don't forget to click on 'Update security settings'
on the workflow tool should you have made changes to the permission
settings in ZMI that you want to take effect on existing content
subject to that workflow.

Raphael


>
> Thanks,
>


_______________________________________________
Product-Developers mailing list
[hidden email]
http://lists.plone.org/mailman/listinfo/product-developers
aclark () Re: How do I manage 'private' objects w/custom wf?
Reply Threaded More More options
Print post
Permalink
In reply to this post by Dylan Jay
Thank you Raphael and Dylan, very helpful!

On 2009-07-14, Dylan Jay <[hidden email]> wrote:

>
> On 14/07/2009, at 5:27 PM, Alex Clark wrote:
>
>> Hi all,
>>
>> I've got a product that aims to use workflow to manage state
>> for 'todo item':
>>    - http://svn.plone.org/svn/collective/Products.todo/trunk/
>>
>> I.e. 'done' or 'not done'
>>
>> Works well, but I just noticed that my todo items are all visible
>> to anonymous, how do I fix this?
>>
>> I'm guessing maybe I need to remove a permission on that wf state
>
>
> You can either have it controlled by workflow in which case in your  
> definition.xml of your todo_workflow, edit the state definitions to  
> override permissions.
>
> for instance.
>
>  <state state_id="done" title="Done">
>    <description>Done</description>
>    <exit-transition transition_id="redo"/>
>
>    <permission-map name="View" acquired="False">
>     <permission-role>Owner</permission-role>
>    </permission-map>
>
>  </state>
>
>
> or you can just set your lower level view permissions to be more  
> restrictive. In which case you want to make sure your workflow doesn't  
> override the view permissions.
>
>
>> Thanks,
>>
>> --
>> Alex Clark · http://aclark.net
>> Buy Practical Plone 3: http://tinyurl.com/practical-plone
>>
>>
>> _______________________________________________
>> Product-Developers mailing list
>> [hidden email]
>> http://lists.plone.org/mailman/listinfo/product-developers


--
Alex Clark · http://aclark.net
Buy Practical Plone 3: http://tinyurl.com/practical-plone


_______________________________________________
Product-Developers mailing list
[hidden email]
http://lists.plone.org/mailman/listinfo/product-developers