Yes, I feel your pain regarding the security issues with the CMS.
I have approached this issue by not telling the contributors they have
access anywhere else. When I train them, I point them only to their
areas. The system looks intimidating to most people, so they are eager
to just get to their area and do the work.
I gave contributors webmaster rights but not admin rights. Right now
if anyone needs to upload a file or make new pages I just do it for
them. This is minimal for the time being, but could grow. THEN we will
need more security. For those who HAVE to add their own pages and
files, I gave them full admin rights. This is only 2 people, and I did
explain to them they have more rights to the site and to please
respect that. What else can you do?
It's scary and frustrating to think how much money the college paid
for this sophisticated system that has such a puny security setup.
Jane Bird
Spartanburg Community College
Spartanburg, SC