Forgot your password?
Document Actions
Partially closed site
This entry describes some of the settings to make this site partially closed. Access is controlled by using group spaces, but a few tweaks are necessary to make the publishing rules work how I wanted them to.
This site is a partially closed site, and uses
group spaces to achieve this. A couple of tweaks are required to
complete the configuration. These tweaks are to workflows to ensure
that anonymous security settings are not inherited all the way up.
The pertinent permission settings are made by going to
'portal_workflow', selecting the appropriate workflow (contents tab) and
associated states.
Workflow
The permissions to set are:
portal_workflow/simpleblog_workflow/states/published
Acquire
permission settings? |
Anonymous
|
Authenticated
|
GroupAdmin
|
GroupLeader
|
GroupMember
|
GroupVisitor
|
Manager
|
Member
|
Owner
|
PortalManager
|
Reviewer
|
|
|
Access contents information
|
||||||||||||
|
Modify portal content
|
||||||||||||
|
View
|
||||||||||||
|
| ||||||||||||
portal_workflow/folder_workflow/states/visible
Acquire
permission settings? |
Anonymous
|
Authenticated
|
GroupAdmin
|
GroupLeader
|
GroupMember
|
GroupVisitor
|
Manager
|
Member
|
Owner
|
PortalManager
|
Reviewer
|
|
|
Access contents information
|
||||||||||||
|
List folder contents
|
||||||||||||
|
Modify portal content
|
||||||||||||
|
View
|
||||||||||||
|
| ||||||||||||
portal_workflow/folder_workflow/states/published
Acquire
permission settings? |
Anonymous
|
Authenticated
|
GroupAdmin
|
GroupLeader
|
GroupMember
|
GroupVisitor
|
Manager
|
Member
|
Owner
|
PortalManager
|
Reviewer
|
|
|
Access contents information
|
||||||||||||
|
List folder contents
|
||||||||||||
|
Modify portal content
|
||||||||||||
|
View
|
||||||||||||
|
| ||||||||||||
portal_workflow/plone_workflow/states/visible
Acquire
permission settings? |
Anonymous
|
Authenticated
|
GroupAdmin
|
GroupLeader
|
GroupMember
|
GroupVisitor
|
Manager
|
Member
|
Owner
|
PortalManager
|
Reviewer
|
|
|
Access contents information
|
||||||||||||
|
Change portal events
|
||||||||||||
|
Modify portal content
|
||||||||||||
|
View
|
||||||||||||
|
| ||||||||||||
Don't forget to go to portal_workflow and choose 'update security settings' after making these changes.
This will give you a partially closed site with the following behaviour:
- Objects 'published' will be visible by non-members
- Objects 'visible' will only be visible by group members
- Blog (from SimpleBlog) can be 'visible' or 'published', and follows the above rules. BlogEntry inside a Blog can be 'published' or 'private'. Published BlogEntry will follow the visibility rules of it's containing Blog, so if the Blog is published, a published BlogEntry will be externally visible. If the Blog is only 'visible' then a published BlogEntry is visible to all members of the group.
Join/Login
We don't want users to be able to create their own accounts. The easiest way to disable the join button for anonymous users is to uncheckAcquire for Add portal member and only let the Manager role have the permission. This will make sure only people that are Managers can add new users. See here for a full description.