- Development - lists.drupal.org

[drupal-devel] fine grained permissions (was Re: [drupal-docs]Permissions page)
by Kobus Myburgh 13 Oct '05

13 Oct '05

> Larry triggered something that I had bubbling in my mind for a long time > already: finer grained permissions. We can learn something here from large companies (such as Novell). As other Novell admins out there would know, you have file system rights and NDS object rights. Taking only file system rights, any file or folder have the following rights: read, write, create, file scan, erase, access control, supervisor and modify And that is only for file system. It sounds daunting, but still they manage to do this without cluttering the interface (too much) with the ConsoleOne application. Maybe someone should undertake a study on how an approach like theirs could be mimicked in Drupal. Regards, Kobus

1 0

[drupal-devel] fine grained permissions (was Re: [drupal-docs] Permissions page)
by Bèr Kessels 13 Oct '05

13 Oct '05

oi. Larry triggered something that I had bubbling in my mind for a long time already: finer grained permissions. On Thursday 13 October 2005 02:16, Larry Garfield wrote: > 2) Permissions not fine-grained enough (does "Create" include "change"?) > I agree completely. We definitely need more fine-grained and descriptive > permissions. There have been several threads about this recently, but not > much code. (I wish I had time to write some.) The hard part is finding > some standard other than "administer", which is a useless word. What I have in mind is something to introduce a parent/child relation in permissions: hook_perm() { $perms[]->title = 'change book pages'; $perms[]->parent = 'create book pages'; return $perms; } means that 'change book pages can only be set true in admin if that role has "create book pages" perms. I am not referring to the permission on check time: only in the permissions administer page: the checkboxes would be greyed out for the permissions that cannot be set. This will allow for a much finer grained permission handling, but will immediately solve some of the clutter. Think about flexinode, for example, where some people would love a per-field permission. Bèr

1 0

RE: [drupal-devel] Improvements abandoned? (was: bug squashingsession)
by Steven Peck 13 Oct '05

13 Oct '05

I am working on a Drupal.org readme which I will post on my scratch site for Doc team review (hopefully soon) that will have this information. Essentially a brief overview readme to how to use the Drupal.org site/community. Mainly links and short instructions. Kind of a help text for the site.... Which is odd, but the sheer volume of information available and customs followed on the site/lists/etc are obviously overwelming. -sp > -----Original Message----- > From: drupal-devel-bounces(a)drupal.org > [mailto:drupal-devel-bounces@drupal.org] On Behalf Of Karoly Negyesi > > On Tue, 11 Oct 2005 14:29:04 +0200, Steve Dondley <sdondley(a)gmail.com> > wrote: > > > What happened to having the bug reports and updates getting > mailed to > > this mailing list? > > http://drupal.org/project/issues/subscribe > > This was advertised here. Yes, this link is barely advertised > on drupal.org :( > > Regards > > NK > >

3 2

[drupal-devel] Getting going on regions for 4.7
by Nedjo Rogers 13 Oct '05

13 Oct '05

Multiple regions opens up a lot of space for creativity--but we'll need to get going if we're going to take advantage of the possibilities. I've created a forum topic on getting going on implementing multiple regions: http://drupal.org/node/33899. It includes a link to a good tutorial by Khalid.

2 2

Re: [drupal-devel] Request for input on Quiz module data structure [long]
by Pat Collins 13 Oct '05

13 Oct '05

On Wed, 12 Oct 2005 19:36:25 -0400, Angie Byron <drupal-devel(a)webchick.net> wrote : x> == THE SOLUTION? == > I've created an alternate, normalized data schema and wanted to get your > feedback on it, if you get a chance. > http://webchick.net/soc/quiz.module/newschema.sql > E-R Diagram: http://webchick.net/soc/quiz.module/quiz-schema-new.sql > I think you meant .png on that last link. :) Pat

1 0

[drupal-devel] Re: Request for input on Quiz module data
by David Norman 13 Oct '05

13 Oct '05

Disclaimer: I'm not totally familiar with the quiz module, but I did read the whole RFC. Regarding the new schema quiz table: 1. "number_of_questions" can be queried and therefore should not be stored IMO if you're going for full normalization. 2. I think "takes" could be have a more descriptive name and should be bigger than tinyint. drupal-devel-request(a)drupal.org wrote: > ------------------------------ > Message: 8 > Date: Wed, 12 Oct 2005 19:36:25 -0400 > From: Angie Byron <drupal-devel(a)webchick.net> > Subject: [drupal-devel] Request for input on Quiz module data > structure [long] > To: drupal-devel(a)drupal.org > Message-ID: <434D9DF9.4090309(a)webchick.net> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > Hi, folks. Hope that this is the right place for this. Apologies in advance for > the length, but I wanted to make sure everyone's on the same page before asking > for feedback. > == BACKGROUND == > As most know, I worked over the summer on the Quiz module. Thanks to a generous > injection of funding from Ejovi Nuwere at SecurityLab.net, I've been able to > both complete most of the work that was not done by the other student assigned > to this project during SoC, and am also able to now focus on adding additional > features to the module. > The quiz module was developed around Robert Douglass's specification (which I've > temporarily mirrored here: http://drupaldev.snarkles.net/node/2) In a nutshell, > this means rather than creating a simple module that could do multiple choice > questions, instead creating a quiz *framework* which could potentially support > almost limitless question types, from traditional multiple choice/fill in the > blank, to really innovative ideas such as "reading" a question aloud to gage > reading comprehension and so on. > == HOW IT CURRENTLY WORKS == > The current schema can be viewed here: > http://cvs.drupal.org/viewcvs/drupal/contributions/modules/quiz/quiz.mysql?… > For the more visually inclined, I've uploaded an E-R Diagram here: > http://www.webchick.net/soc/quiz.module/quiz-schema-old.png > This is based off the original proposal, where serialized arrays (/me ducks in > advance) are used to store answer, feedback and user response data. > NOTE: Skip to "THE PROBLEM" if you don't care about how this stuff is stored > currently :P > A typical result array (stored in quiz_results.results) might look like: > Array > ( > [10] => Array > ( > [input] => Array > ( > [0] => 0 > [1] => 2 > [2] => 3 > ) > [feedback] => Array > ( > [0] => Correct! > [1] => Correct! > [2] => Correct! > ) > [score] => 1 > ) > [6] => Array > ( > [input] => Array > ( > [0] => 2 > ) > [feedback] => Array > ( > [0] => Nope, fooled you! > ) > [score] => 0 > ) > ... > ) > The array keys (10 and 6) are question node IDs... in other words, this is how > the user responded to both question 10 and question 6. Over the course of the > quiz, this array keeps growing, with one array of results per question. > "input" is an array of the answer(s) that the user selected on that question. > The first question was a multiple choice question, so the user plugged in three > answers (answers 1, 3, and 4 -- remember that arrays start at 0 index). The > second question was only a single-choice question, and the user selected answer 3. > "feedback" is an array of the feedback to the answer(s) the user selected for > input. As you can see, the user answered correctly on all three answers on the > first question, but did not answer correctly on the second question. > Finally, "score" is either a 1 (indicating the answer was correct) or a 0 > (indicating the answer was not correct). > == THE PROBLEM == > The question was raised to me: > "If there's a million questions, and a > million students, and we want to find out for a given > question, how many student got it right how do we do that?" > Right now, the answer is something along the lines of this: > ----------------------------------------------------------------------- > function get_question_results($quiz_nid, $question_nid) { > // Array to store question results > $question_results = array( > 'right' => 0, > 'wrong' => 0 > ); > // Grab a list of the results array for each quiz attempt > $quiz_results = array(); > $results = db_query("SELECT r.results FROM {quiz_results} r WHERE r.quiz_nid = > %d", $quiz_nid); > while ($result = db_fetch_object($results)) { > $quiz_results[] = unserialize($result->results); > } > // Now, loop through each result and look for the given question > foreach ($quiz_results as $key => $value) { > if ($value[$question_nid]) { > // If question is found check if it was answered correctly or not > if ($value[$question_nid]['score'] == 1) { > $question_results['right']++; > } else { > $question_results['wrong']++; > } > } > } > return $question_results; > } > // Call the function and output results > $results = get_question_results(12, 10); > echo $results['right'] ." students answered this question right, " . > $results['wrong'] ." answered it wrong."; > ----------------------------------------------------------------------- > This is quite processor and RAM-intensive, since it has to load ALL of the > results for each attempt on a given quiz first, then parse through those to find > individual question attempts, and then finally retrieve the answers from each > and evaluate whether or not they were correct. > And this same basic logic has to be completed for each potential query someone > might want to throw at it.. Such as, "What is the average score of this user > among all exams?" > In short, it doesn't look like this solution is going to be very scalable in the > long-term for the kind of ad-hoc querying that educators are likely going to > really want to be able to do. > == THE SOLUTION? == > I've created an alternate, normalized data schema and wanted to get your > feedback on it, if you get a chance. > http://webchick.net/soc/quiz.module/newschema.sql > E-R Diagram: http://webchick.net/soc/quiz.module/quiz-schema-new.sql > Changes: > - quiz/quiz_questions tables stay the same > - multichoice turns into 'quiz_question' containing only a primary key and a > "properties" field to take the place of "multiple_answers." I envision this > field as being more flexible than multiple_answers, as it could potentially > store a plethora of options for very diverse array question types, perhaps in > the form of key/value pairs or something (multichoice=1;email_results=1; etc.) > - answers are now broken out into a 'quiz_question_answer' table, which links > back to quiz_question with separate fields for answer, feedback, and points. The > answer field itself could store a wide variety of options, such as "Answer" for > a multichoice question, "St. Paul|Saint Paul" for a fill-in-the-blank question, > and so on. Since answer display is handled in each question type module in the > _form and _render_question hooks, we can still have the advantage of storing > data independently from the actual quiz module. Feedback, too, can be stored in > whatever way makes sense for the answer, and points can indicate whether a > question is incorrect (0 points) or can also be used for 'weighting' questions > (answer 1 is 20 points, answer 2 is 50 points, etc.) > - Results are now stored in two different tables: quiz_result for the overall > properties (start time/end time, etc. -- essentially the same as the current > table) and quiz_question_results which provides the textual representation of > what that user put for his/her answer on each question attempt. This could be > stored in a similar manner to the answers table... for multiple answer > questions, it could be 23,63,3 to indicate the answer ids selected, for > fill-in-the-blank it could have 'Minneapolis', etc. Each question type's > _evaluate_question hook would take the data from the answer field and check it > against the given question's answers. > - Fields representing times and dates are switched to DATETIME instead of > INTEGER (for UNIX timestamp) in order to help with date range calculation > And if you made it through that, a hearty congratulations. :P > Any thoughts? > ------------------------------

1 0

[drupal-devel] SQLite Support
by Sergio 12 Oct '05

12 Oct '05

Can someone help me here? I was trying to use these on drupal 4.6.3 but I don't know why it always give me 'access denied' to the front page... Any enlightenment? Thanks, - Sergio

2 1

Re: [drupal-devel] permissions page
by Kobus Myburgh 12 Oct '05

12 Oct '05

Not really sure how this will improve this problem. Besides, iframe is not cross-browser, is it? Isn't iframe a Netscape thing? Kobus >>> dopry(a)thing.net 10/11/2005 8:49 PM >>> Is there a reason to not just render the permissions table in a horizontally scrollable iframe? Permission Group +------------------------------------+ | role1 role2 role3 | Permission 1 | | Permission 2 | | Permission 3 | | |<-----------------------##--------->| +------------------------------------+ On Fri, 2005-10-07 at 17:09 -0400, Herman Webley wrote: > Your solution doesn't solve the specific problem that Karoly is trying > to address. That issue I believe is the space consumed by the current > iteration of the permissions page. > > What do you see as the scalability issues related to Karoly's proposed solution? > > Your solution does sound good though. It would require a lot of > scrolling, but thats the only problem. > > On 10/7/05, Gerhard Killesreiter <killesreiter(a)physik.uni-freiburg.de> wrote: > > > I don't like the idea of having text as images. Doesn't scale. Also, if > > you scroll down onthat page, you still won't know to which role you are > > assigning perms. I think my solution is simple, accessible, and solves all > > problems. > > > > Cheers, > > Gerhard > > > > > -- > Best regards, > Herman Webley > >

3 2

Re: [drupal-devel] permissions page
by Kobus Myburgh 12 Oct '05

12 Oct '05

Ah, I stand corrected. Thanks! I briefly checked an HTML book that I had on my desk, and it attributed that to Netscape Kobus >>> web(a)timaltman.com 10/12/2005 9:11 AM >>> On Wed, 12 Oct 2005 08:24:20 +0200, Kobus Myburgh <ITBJDM(a)puknet.puk.ac.za> wrote: > Not really sure how this will improve this problem. Besides, iframe is > not cross-browser, is it? Isn't iframe a Netscape thing? No, IFRAMEs are part of the HTML 4.01 Transitional DTD. -- Tim Altman

1 0

Re: [drupal-devel] permissions page
by Kobus Myburgh 11 Oct '05

11 Oct '05

I am not sure whether I understand your proposal correctly. See attached mock-up to see if I understand you correctly. If I do, my first idea here won't be feasible... First idea: This probably doesn't belong in this post, but I am posting here because it seems a refactoring of this page is eminent. While this is the case, it should also be done that the header row is repeated every 20 lines or so, because if you have a lot of modules installed, and a few roles (any amount of roles that require you to scroll sideways to edit) makes it very tedious to assign permissions. Second Idea: Since performance is not really an issue here, why not have different pages for each role (selectable by a drop-down, perhaps)? That way you can set the permissions for one user at a time, but you can set all modules in one sitting. If you have few roles and few modules, it will be slightly more work than now, but if you have a lot of modules/roles, this would be a great change. Third Idea: Add a checkbox "All" which will give ALL roles the specific permission. Regards, Kobus >>> karoly(a)negyesi.net 10/7/2005 3:35:41 PM >>> Role names take too much place and vertical text is only in CSS3 (and in IE for long) So, I thought of diagonal text, think one table cell per letter. There are javascripts for this out there, it would be very easy to do in PHP. Only one (or few?) modules would be displayed at once. To make the presumable huge table fit, let's make it unthemed with just a link to 'admin' to save space. Color the table like the chess board. Maybe 3 x 3 checkboxes would be one color. Regards NK

21 42