Workflow issue : Does the owner may delete the contents it has created?

[tcr]

Hi,

  (Zope 2.8.6-final, python 2.3.5, win32, Plone 2.1.3 and CMFPlacefulWorkflow )  

After many tests and to reading many posts on this forum, especially this one:
http://www.nabble.com/How-to-give-delete-permission-to-owner-tf710232s6741.html#a1880414

My answer is : NO.

You should use a python script and an external method to allow an owner (role)  to remove their own documents!

In site, I have one folder which contains several folders : only Manager role can create/modify/delete them (and content), and in this folders : owner can create/modify and, should delete, its own contents when this one are in "private" or "pending" state

I have two groups : -

- webmaster = "Manager" role (local role)
- contributor = "Owner" role (local role)

So , I have two Workflows (below only 'delete objects' permission config.) :
- one for folder (and sub-folders) where permission for 'delete objects' is like this :
Acquire : unchek
Anonymous : uncheck
Authentificated : uncheck
Manager : check
Member : uncheck
Owner : uncheck

- second for another Plone content where permission for 'delete objects' is like this :
Acquire : unchek
Anonymous : uncheck
Authentificated : uncheck
Manager : check
Member : uncheck
Owner : check

Well, "Manager" can delete everything (what I want) and "Owner" cannot delete folders ( (what I want too) but cannot delete its content too (What I would like it to do...)

For me, we should assign "delete permission" to owner without use a script python... or perhaps I have missing something?

Any clues are welcome,

Thank you,

Thierry

[Yuri-11]

tcr wrote:

> Hi,
>
>   (Zope 2.8.6-final, python 2.3.5, win32, Plone 2.1.3 and
> CMFPlacefulWorkflow )  
>
> After many tests and to reading many posts on this forum, especially this
> one:
> http://www.nabble.com/How-to-give-delete-permission-to-owner-tf710232s6741.html#a1880414
>
> My answer is : NO.
>  

you need permission on the container to "delete".

 But you can make a workflow transition to "delete" the content and
submit it to the manager, move the content somewhere else, and so on.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tcr]

tcr wrote:
> Hi,
>
>   (Zope 2.8.6-final, python 2.3.5, win32, Plone 2.1.3 and
> CMFPlacefulWorkflow )  
>
> After many tests and to reading many posts on this forum, especially this
> one:
> http://www.nabble.com/How-to-give-delete-permission-to-owner-tf710232s6741.html#a1880414
>
> My answer is : NO.
>  

Yuri-11 wrote:

you need permission on the container to "delete".

The container (Plone Site) has this permission for Manager and Owner (Acquire? checked too)

Yuri-11 wrote:

 But you can make a workflow transition to "delete" the content and
submit it to the manager, move the content somewhere else, and so on.

Thanks for your idea, but in fact, I wish that the owner can delete himself its contents without use transition... (Actions > Delete)

[Yuri-11]

tcr wrote:

> tcr wrote:
>  
>> Hi,
>>
>>   (Zope 2.8.6-final, python 2.3.5, win32, Plone 2.1.3 and
>> CMFPlacefulWorkflow )  
>>
>> After many tests and to reading many posts on this forum, especially this
>> one:
>> http://www.nabble.com/How-to-give-delete-permission-to-owner-tf710232s6741.html#a1880414
>>
>> My answer is : NO.
>>  
>>    
>
>
> Yuri-11 wrote:
>  
>> you need permission on the container to "delete".
>>
>>    
>
> The container (Plone Site) has this permission for Manager and Owner
> (Acquire? checked too)

Owner works only "inside" the object, otherwise you could delete
everything :)

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tcr]

Yuri-11 wrote:

tcr wrote:
> tcr wrote:
>  
>> Hi,
>>
>>   (Zope 2.8.6-final, python 2.3.5, win32, Plone 2.1.3 and
>> CMFPlacefulWorkflow )  
>>
>> After many tests and to reading many posts on this forum, especially this
>> one:
>> http://www.nabble.com/How-to-give-delete-permission-to-owner-tf710232s6741.html#a1880414
>>
>> My answer is : NO.
>>  
>>    
>
>
> Yuri-11 wrote:
>  
>> you need permission on the container to "delete".
>>
>>    
>
> The container (Plone Site) has this permission for Manager and Owner
> (Acquire? checked too)
Owner works only "inside" the object, otherwise you could delete
everything :)

Of course yuri :), but doesn't works for me but after many hours of reading several resources over the web,  I  have understand that an user could not delete (in a simple way) its own documents only.

For allow an user to delete its documents, this requires that "delete objects" was checked into the container (as you have said), but that means it can also remove ALL the contents even those who don't belong to it and the container too (folder in my case) ! it's not what I want.

To write a python script seems a bit strange because it should be possible natively to a user who creates able to delete what he has created and only this...

Thanks again and have nice day,

Thierry

[SwabbyNat]

This's driving me nuts. Trying to give proper permissions for certain users that are reviewers, editors, etc. but NOT managers, to delete their own content.

ie:

They create a folder, they should be able to delete it, they create a page, they should be able to delete it.

I've looked all over, and seen some discussion on this, but no solution other than having some external process that deletes the objects (through a python script) which just seems like overkill.

IS there a way around this? Or am i just not doing something right?



-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[Larry Pitcher-5]

Nathaniel Hunter wrote:

> This's driving me nuts. Trying to give proper permissions for certain users that are reviewers, editors, etc. but NOT managers, to delete their own content.
>
> ie:
>
> They create a folder, they should be able to delete it, they create a page, they should be able to delete it.
>
> I've looked all over, and seen some discussion on this, but no solution other than having some external process that deletes the objects (through a python script) which just seems like overkill.
>
> IS there a way around this? Or am i just not doing something right?
>

Hi,

Which version of Plone are you on, and which workflow are you using?

--
Larry Pitcher
Catapult Solutions

Email: larry.pitcher@...
Skype: larry.pitcher
Phone: [phone]

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[SwabbyNat]

Plone 3.0.2, and just the default workflow.

-----Original Message-----
From: Larry Pitcher [mailto:unclelarry@...]
Sent: Tuesday, October 23, 2007 4:10 PM
To: Nathaniel Hunter
Cc: plone-users@...
Subject: Re: [Plone-Users] Delete Permissions for ANYONE other than Manager??

Nathaniel Hunter wrote:

> This's driving me nuts. Trying to give proper permissions for certain users that are reviewers, editors, etc. but NOT managers, to delete their own content.
>
> ie:
>
> They create a folder, they should be able to delete it, they create a page, they should be able to delete it.
>
> I've looked all over, and seen some discussion on this, but no solution other than having some external process that deletes the objects (through a python script) which just seems like overkill.
>
> IS there a way around this? Or am i just not doing something right?
>

Hi,

Which version of Plone are you on, and which workflow are you using?

--
Larry Pitcher
Catapult Solutions

Email: larry.pitcher@...
Skype: larry.pitcher
Phone: [phone]

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[Brian J-2]

This was an issue previously:
https://dev.plone.org/plone/ticket/7078

The adjustment should have been included in plone 3.0.1.  Was the
content in question
created by the user that should have delete on it? They should be able
to delete content they own, or have edit permission on.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[SwabbyNat]

The issue i'm having is that ONLY when a user has created their OWN folder and then they create a page inside that folder, can they move/delete anything.

If that user creates a page inside a folder that isn't owned by them, they can't delete/cut that page. Same goes for a folder created in an area that isnt owned by that user. Once its there ONLY a manager can do anything to it....

I've tried to delete/cut in contents view, as well as viewing the page/folder and trying to delete or cut by the dropdown lists, neither work unless the item to be deleted/cut is IN a folder owned by the user.

Shouldn't ANY item, be it a folder, or page, or whatever, be deleteable by the user? I understand not being able to delete objects in the contents view, as there could be multiple owners objects in there. But if an owner views the item they created they "should" be able to go to actions>delete no?

I'm using the default workflow right now. I have gone into the ZMI > SITE > portal_workflow > portal_types > Folder and in the security pane checked that "Copy or Move" and "Delete Objects" are on for Owners. I also did this for pages, files, images, etc. Anything that an Owner should be able to change...

Help would be greatly appreciated, i've got MANY users adding content right now, and the inability to move/delete their own content could spell doom for Plones success here.

Thanks!

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[Larry Pitcher-5]

Nathaniel Hunter wrote:

> The issue i'm having is that ONLY when a user has created their OWN folder and then they create a page inside that folder, can they move/delete anything.
>
> If that user creates a page inside a folder that isn't owned by them, they can't delete/cut that page. Same goes for a folder created in an area that isnt owned by that user. Once its there ONLY a manager can do anything to it....
>
> I've tried to delete/cut in contents view, as well as viewing the page/folder and trying to delete or cut by the dropdown lists, neither work unless the item to be deleted/cut is IN a folder owned by the user.
>
> Shouldn't ANY item, be it a folder, or page, or whatever, be deleteable by the user? I understand not being able to delete objects in the contents view, as there could be multiple owners objects in there. But if an owner views the item they created they "should" be able to go to actions>delete no?
>
> I'm using the default workflow right now. I have gone into the ZMI > SITE > portal_workflow > portal_types > Folder and in the security pane checked that "Copy or Move" and "Delete Objects" are on for Owners. I also did this for pages, files, images, etc. Anything that an Owner should be able to change...
>
> Help would be greatly appreciated, i've got MANY users adding content right now, and the inability to move/delete their own content could spell doom for Plones success here.
>
> Thanks!

Nathaniel,

You're going to the wrong place to adjust your settings. You should go into:

ZMI > site > portal_workflow > Contents Tab >
simple_publication_workflow > States Tab > private > Permissions Tab.

This is where you set permissions for various roles. After you click the
boxes you want and then click "Save Changes", make sure that you go back to:

ZMI > site > portal_workflow

Here you scroll to the bottom of the page and click the "Update Security
Settings" button to make your changes effective for existing objects.

Of course, you may want to adjust other workflow states besides just
Private. You have to decide whether you want to allow authors to change
objects that have been Published. If that's okay, then go into the
Published state and adjust the permissions there, too.

HTH,

--
Larry Pitcher
Catapult Solutions

Email: larry.pitcher@...
Skype: larry.pitcher
Phone: [phone]

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[SwabbyNat]

Just did what you suggested, but nothing has changed. I have logged in as another user in an "editor" role, created a page in a folder that wasn't owned by that user, then navigated to the page, and under the actions menu i only have "copy", no delete or cut.

I even restarted the server as a sanity check, still no go.....

I'm confused why a user wouldn't be able to delete a page they created by default???

-----Original Message-----
From: Larry Pitcher [mailto:unclelarry@...]
Sent: Wednesday, October 24, 2007 12:51 PM
To: Nathaniel Hunter
Cc: plone-users@...
Subject: Re: [Plone-Users] Delete Permissions for ANYONE other than Manager??

Nathaniel Hunter wrote:

> The issue i'm having is that ONLY when a user has created their OWN folder and then they create a page inside that folder, can they move/delete anything.
>
> If that user creates a page inside a folder that isn't owned by them, they can't delete/cut that page. Same goes for a folder created in an area that isnt owned by that user. Once its there ONLY a manager can do anything to it....
>
> I've tried to delete/cut in contents view, as well as viewing the page/folder and trying to delete or cut by the dropdown lists, neither work unless the item to be deleted/cut is IN a folder owned by the user.
>
> Shouldn't ANY item, be it a folder, or page, or whatever, be deleteable by the user? I understand not being able to delete objects in the contents view, as there could be multiple owners objects in there. But if an owner views the item they created they "should" be able to go to actions>delete no?
>
> I'm using the default workflow right now. I have gone into the ZMI > SITE > portal_workflow > portal_types > Folder and in the security pane checked that "Copy or Move" and "Delete Objects" are on for Owners. I also did this for pages, files, images, etc. Anything that an Owner should be able to change...
>
> Help would be greatly appreciated, i've got MANY users adding content right now, and the inability to move/delete their own content could spell doom for Plones success here.
>
> Thanks!

Nathaniel,

You're going to the wrong place to adjust your settings. You should go into:

ZMI > site > portal_workflow > Contents Tab >
simple_publication_workflow > States Tab > private > Permissions Tab.

This is where you set permissions for various roles. After you click the
boxes you want and then click "Save Changes", make sure that you go back to:

ZMI > site > portal_workflow

Here you scroll to the bottom of the page and click the "Update Security
Settings" button to make your changes effective for existing objects.

Of course, you may want to adjust other workflow states besides just
Private. You have to decide whether you want to allow authors to change
objects that have been Published. If that's okay, then go into the
Published state and adjust the permissions there, too.

HTH,

--
Larry Pitcher
Catapult Solutions

Email: larry.pitcher@...
Skype: larry.pitcher
Phone: [phone]

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[Georg Rellensmann]

Hi all,

in a plone 3.0.5 instance the "SHARING" tab doesn't work.
I just can't figure out why.

I can assign permissions and in the ZMI I see the local roles set by the
sharing tab. But these local roles do not affect site behaviour.

[I create a docoument, status private, assign role "EDIT" "VIEW" to user Max,
when logged in as user Max, he cannot see or edit the doc, of course he has
access to the folder which contains doc and he can view all the other
documents there. This happens with simple_workflow as well as the default
workflow]

This occured after migration 2.5.3 -> 3.0.5, whith all additional products
removed. Everything else works nicely.

Any hints are appreciated,
georg

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users