BibApp Roles Prototype

[UTbibapp]

Hello,

In the current git version ( less than 2 weeks old) I found a few
issues with roles. For example the "Person Admin" cannot Create/Edit/
Delete the Pen Names (I get a "Permission denied. You cannot access
the requested page" message). The "Person Admin" cannot delete the
person's picture, but "Person Admin" can replace the picture.
"Person Admin" cannot delete works for the person it administers.

I created a page at https://github.com/BibApp/BibApp/wiki/BibApp-Roles
which I hope will start some discussion about roles and actions in
BibApp. If this is not the right place for this, please feel free to
relocate the page or let me know.

Gabriela

[Howard Ding]

Hi Gabriela,

I for one would welcome a discussion of Bibapp roles. I'm not at all
happy with the way things are implemented currently, although to be fair
there was a lot less reusable code for doing authorization when it was
originally done.

You might want to advertise this on the main Bibapp list as well as the
development list, as the first step to deciding what to do with roles is
knowing what users (and not developers) want to accomplish with them.

To be honest, from a development perspective I'd prefer to just rip out
all of the current role stuff in toto and redo it from the ground up.
This might involve adding some extra work for anyone who is already
using the current role system, but I'm not sure there will be a good
migration path.

Regardless, the first step is really to figure out what people actually
want the system to do. I suspect that when that is answered the rest
will be clear (and that it won't actually be that hard to implement).

Thanks,
Howard