The Official PostNuke Installation & Getting Started Guide: Revision 9939 / Preview | ||
---|---|---|
Prev | Chapter 17. Groups & Permissions | Next |
The following is an example of a Group Permissions model as used on http://www.drewvogel.com. The line numbers, shown below, are for this Guide only (they do not appear in PostNuke), and are explained below.
Group Component Instance Perm. level
------------------------------------------------------------------------
1. Admins Menublock:: Administration::*. Admin
2. Admins .* .* Admin
3. All groups Menublock:: Administration::*. None
4. Users .* .* Comment
5. Unregistered Menublock:: Main Menu:(Andromeda| None
Logout|Forums|Submit
News|Members List|
Messages):
6. Unregistered .* .* Read
Line 1: Grant all members of Group "Admins" a Permission level of "Admin" for all Instances matching a Menublock called "Administration". Administrators have full access to the Administration menu.
Line 2: Grant all members of Group "Admins" a Permission level of "Admin" for all Instances of EVERYTHING on the site -- this grants all Admins unlimited access for everything on the site.
Line 3: Remove access to Menublock "Administration" for members of "All groups". This disables access to Administration functions from ALL users, unless specifically allowed by a special user or group permission. Line 1, above, is an example of a special group permission.
Line 4: Allow all members of Group "Users" (registered users) access to "Comment" on everything on the site.
Line 5: Remove access (set to "None") to specific items "Andromeda|Logout|Forums|Submit News|Members List|Messages" from the "Main Menu" of "Unregistered" users.
Line 6: Allow all "Unregistered" users access to "Read" everything on the site.
As you can see, Permissions are evaluated by PostNuke from the top first, moving down through the permissions.