[development] Even more flexibility in content management

Larry Garfield larry at garfieldtech.com
Fri Dec 29 20:09:03 UTC 2006

On Friday 29 December 2006 11:59 am, Earnie Boyd wrote:

> Why would member vs visitor be different for Other?  I don't see how it
> can be different.  The visitor is just a non-authenticated member.  The
> visitor is always assigned the non-authenticated role and can never be
> assigned another role.  The authenticated member is alwasy assigned the
> authenticated role and the role, if any, assigned to his profile.
> Group though is new to Drupal core as far as access control is
> concerned and AFAIK.  Roles could be assigned to a Group as well and
> then the member assigned a Group.  The ORed bits of all the Roles would
> determine what the user permissions are.  The Group control could be
> used to allow an authenticated member to create a sub-site and only
> members of the sub-site group could visit that content.
> Perhaps multiple additional roles should be allowed to be selected in
> the user profile so that the ORed bits give a user greater privilege
> with each additional role?

Er, you are aware that permissions are already ORed for any Role a user has, 
right?  If Role A has permissions 1 and 2, and Role B has permissions 3, and 
5, then a user that has both Role A and Role B checked will have permissions 
1, 2, 3, and 5.  That's been the case for as long as I've been around at 

I also don't know what you mean by Group.  Vanilla Drupal has no concept of a 
Group; there's Role, but that's not Group.  The only Group I know of is 
Organic Groups, which is another animal entirely.  Let's keep our terminology 

Larry Garfield			AIM: LOLG42
larry at garfieldtech.com		ICQ: 6817012

"If nature has made any one thing less susceptible than all others of 
exclusive property, it is the action of the thinking power called an idea, 
which an individual may exclusively possess as long as he keeps it to 
himself; but the moment it is divulged, it forces itself into the possession 
of every one, and the receiver cannot dispossess himself of it."  -- Thomas 

More information about the development mailing list