Plone中用户、组和权限管理
Users, Groups, and Permissions
来源：http://weblion.psu.edu/services/documentation/bootcamp-beginners/users-groups-permissions
Controlling who can do what on your Plone site
Also available in presentation mode…
Users
- Anonymous
- Those who cannot log into Your Plone Site.
- Logged-In (or Authenticated)
- Listed as Users in Plone Control Panel.
- Their default Role is Member.
Groups
- A set of one or more Users.
Roles
- Global Roles: Apply to Entire Site. Can see these listed in Plone Control Panel.
- Local Roles: Apply to a Section of the site.
Permissions
- Roles come with Permissions
- The ability to Edit, Publish, Delete, and so on.
Granting Roles (and Therefore Permissions)
- You can grant Roles to individual Users.
- But it's usually better to grant Roles to Groups.
Sharing
- A Local way of granting Roles and Permissions.
- Share a Folder, Page, Collection, etc. with a Group...
- ...and can grant the Group Permissions on that item.
Example
- You have a folder on your site called Training.
- Authenticated User Rose Pruyne needs to add and edit content in this Training folder.
- You, the site manager, create a Group called Training Content Providers.
- You add Authenticated User Rose Pruyne to the Group Training Content Providers.
- You Share the Training folder with this Group.
- You grant Add and Edit privileges to this Group.
Why Groups Instead of Individual Users?
- Who can do what?? Where??
- Keeping track of Groups is much easier.
Recommended Practice
- Assign Users to Groups.
- Assign Groups to areas of the site, using Sharing.
- Do not assign Roles to individual users.
- Do not assign individual Users to areas of the site.
Exercise
- Add a new Folder on your site and call it Documentation.
- Add a new User to your site.
- Create a Group called Documentation Content Providers.
- Add the new User to this Group.
- Give this Group Add and Edit permissions
- Open your site in another browser and log in as the new User. Try to add a page to the Documentation Folder.
next..