Better permissions for group views and files

[hon sim]

There should be a way to do the following :

-Restricting a member of a group to create/edit/delete a view and also restricting him/her to upload a file(in a group) or giving permissions to those who can upload a file and edit/create/delete a view (in a group).

-Know which member has uploaded the file in a group.

[Nigel-catalyst (nigel-catalyst)]

This is the way it works in the current development code:

* There are two different "grouptypes" that ship with 1.1 - standard and course. They are pluggable, you can add more if you want (in code)
* Each grouptype has 'roles' associated with it. Each user in a group has a role. The standard grouptype has 'admin' and 'member' roles, the course grouptype has 'admin', 'tutor' and 'member'.
* Users will be restricted from creating views by role - in standard groups, all users can do it while in course groups only the users with the admin/tutor roles can
* Users will be restricted from uploading files/creating folders etc. by role - in course groups, by default only admins and tutors will be able to upload files to the files area, but they can create folders in there that any user in the group can use.

As you can see, this is all controlled by group roles. If you have specific requirements, you'll have to write a bit of code in 1.1 - it's possible later that some of these permissions could get a UI.

As for the second part, that's a separate issue, though something that can be solved by adding another column to the file page probably.

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/628
Committed: http://gitorious.org/mahara/mahara/commit/5117c73336564ece6f2a38e95019c857b87fd027
Submitter: Richard Mansfield (<email address hidden>)
Branch: master

commit 5117c73336564ece6f2a38e95019c857b87fd027
Author: Richard Mansfield <email address hidden>
Date: Tue Aug 30 16:30:28 2011 +1200

    Allow per-group page editing permissions

    The roles which have edit permissions on group views is set for each
    grouptype. This changes the setting to be per-group.

    Partially addresses bug #547362, bug #631189

    Change-Id: I3f51f0ed44b7f479a094a2c5b2e2ee4807722e34
    Signed-off-by: Richard Mansfield <email address hidden>

[Richard Mansfield (richard-mansfield)]

With the above change, each group can now configure which roles are able to create/edit/delete the group views, which is much more flexible than having it set by grouptype, and probably addresses most peoples' needs. Leaving this bug open though as it requests permissions for individual users rather than by role.

[Kristina Hoeppner (kris-hoeppner)]

The outstanding thing on this wishlist item then is:

Know which member has uploaded the file in a group. I created bug #1409373 for that.