Re: Re: Groups vs. Users - Trying to limit access to various features...
> Since you now have 1.9.2, you might experiment with permissions by category as a way to get around having to set permissions on a per-object basis. I'm still getting acquainted with permissions by category tools, but they seem to open up whole new vistas on the permissions scene. Go Admin > Categories and you should see the permissions editing key icon beside each category. See generally, Categories Details
at doc.tikiwiki.org, subtopic Permissions.
As far as I know, the perms associated with Categories are for viewing the category itself in listings, etc., not the items within the category. Categories are not meant to be a mechanism for assigning viewing permissions of other Tiki objects, AFAIK. I tried to do this (with 1.9.0 or so, as I recall), and it didn't work consistently (although there was some effect, it seems).
> This allows you to assign viewing and editing rights to permission groups by Tiki category. A Tiki category can include objects of multiple types, e.g., wiki page, forum, etc. So, e.g., only people with group A permissions can view/edit forums and pages assigned to Category "Rockers & Stalkers." Category permissions can also be set to apply selected permissions to all child categories of a category. So it requires far less burdensome permissions management than per-page permissions.
Have you set up a Tiki site where perms are assigned this way, and the perms work correctly?
> I have not yet experimented to see what happens when a user holds multiple group permissions that both allow and do not allow access by category and that subject does not seem to be covered yet in the documentation.
This is one reason why perms by category wouldn't work for many Tiki sites. For this to work, categories would have to be redefined in a segmented way to follow group-perm requirements, and further segmented to comply with multi-group users' perms. This would make categories rather useless for their original purpose. I think the idea of perm sets that sylvie mentioned will be better, since that won't affect Categories.
-- Gary