Mailing-List: contact dev-help@cocoon.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cocoon.apache.org
Received-SPF: neutral (asf.osuosl.org: local policy)
Message-ID: <435B3F2F.8050507@apache.org>
Date: Sun, 23 Oct 2005 08:43:43 +0100
From: Ross Gardler <rgardler@apache.org>
User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206)
MIME-Version: 1.0
To: dev@cocoon.apache.org
Subject: Access to daisy docs (Re: forrest config for exporting daisy docs)
References: <4358CCE2.6090707@apache.org> <435941F0.6040805@apache.org>
 <43594A40.4080908@odoko.co.uk> <435AB303.8070307@apache.org>
 <435B3676.5040702@odoko.co.uk>
In-Reply-To: <435B3676.5040702@odoko.co.uk>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Upayavira wrote:
> Stefano Mazzocchi wrote:
> 
>>Upayavira wrote:

...

>>>>An "edit this page" link would make is *sooo* much better to tie the
>>>>whole system together and shouldn't be that hard.
>>>
>>>
>>>
>>>With one of those 'don't crawl me' request parameters, I assume? And a
>>>robots.txt on Daisy. We don't want our daisy content crawled by search
>>>engines, do we?
>>
>>
>>why not? showing a login page to a search engine is not going to make
>>that big of a difference
> 
> 
> Well, at the moment, all content in Daisy is visible to the world. I
> don't like this. Were it protected in some way, I would agree with you.

It can be protected in pretty much any way you want, anyone with admin 
rights on Daisy can do it.

Anyone who arrives at the wiki initially has the role of "guest". People 
can self register, this makes them "user". After this rights have to be 
defined and assigned by an admin.

In addition we can limit access to only live documents, i.e. published 
and to particular collections. It's also possible on a per page basis 
but administration of this is cumbersome, the ACL interface is not 
really geared up for this.

So the question is, with respect to read access to the "live" documents 
and to the "in development" docs (write access is already defined):

1) should we keep access open to all users (including guests)
2) should we allow access to users (self registration possible)
3) should we only allow access to people approved by the community

My view is that we restrict read access to published docs to "users" and 
encourage people to comment on the docs rather than edit them.

The we have the existing doc-editors and doc-committers role for editing 
and publishing.

Ross

Ross