Personal tools
You are here: Home Documentation Tutorials Understanding permissions and security Local roles and sharing
Support

Get Help

Join our chat rooms or support forums if you have more specific questions.

Plone Training
Learn how to design, build, and deploy a website in Plone through one of the numerous Plone training sessions around the world.
Find Plone training…
 
Document Actions

Local roles and sharing

Often, you want to give a user or group specific (usually elevated) permissions in a specific area of your site, but not site-wide. Enter local roles and the 'sharing' tab.

Martin Aspeli

Plone uses a combination of low-level Zope permissions, roles, local roles and workflows to manage permissions on objects. Understanding these will help you manage how, and by whom, your Plone site is accessed.
Page 3 of 5.

The sharing tab on standard Plone content is what lets you give people different permissions in different areas. If it is not shown, you can find it by appending /folder_localrole_form to a URL.

On the local role form, you can search for another user and assign that user roles. You can also assign roles to groups (see the previous page). Most commonly, you will give other users either the Owner or Manager role over your content to give them the ability to modify it, but with custom permissions and roles, you may have other roles to grant.

Note that role selection will acquire down, so if a user has Manager role at the /stuff folder, they will also have it at /stuff/documents/my-document. Currently (until Plone 2.1, most likely), local roles can be added at a lower level in the acqusition tree, but not taken away. That is, if you give a user Manager permissions at /stuff, there is no way to prevent him or her from having the Manager permission at /stuff/documents. This is summarised in PLIP 16.

A common way of using local roles is to give the members of a particular portal group Manager permissions in a given folder. For example, to give all members of the A-Team group free reins in the /missions folder, go to /missions/folder_localrole_form either by typing in the URL or clicking the sharing tab in that folder, and assign the Manager local role to the A-Team group.

 
by Martin Aspeli last modified December 9, 2005 - 23:22 All content is copyright Plone Foundation and the individual contributors.

update for plone 3

Posted by Encolpe Degoute at July 24, 2008 - 01:23
/folder_localrole_form is now replaced by /@@sharing

For any issues with the web site functionality, please file a ticket.

Please consult the policy on plone.org content if you want your content published on this site.

Servers and hosting by