Activity Library/Admins/Groups

From Sugar Labs
Jump to navigation Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Permission Groups

Admins

Rules: *:*

Site administrators with access to everything.

Content Admins

Rules: Admin:EditAnyAddon,Admin:EditAnyLocale,Editors:*,Admin:lists,Admin:applications,Admin:addons,Localizers:*

Content administrators with access to:

  • Edit the details of any add-on
  • Edit the translations for any locale
  • Editor CP (all)
  • Localizer CP (all)
  • Admin CP
    • Lists Manager
      • Add-on types
      • Categories
      • Platforms
      • Responses
    • Application Manager
    • Add-on Manager

Testers

Rules: Tests:*

Can run tests in the test suite in production.

Senior Editors

Rules: Editors:*,Admin:EditAnyAddon

Senior Editors can access all of the Editor CP, as well as edit the details of any add-on.

Editors

Rules: Editors:*

Editors can access all of the Editor CP

View Localization CP

Rules: Localizers:View

Can view all of the locales and translations in the Localizer CP, but cannot make any changes.

{locale} Localizers

Rules: Localizers:{locale}

Can view all of the locales and translations in the Localizer CP and can change the translations in {locale}.

Creating Groups

Locale Groups

If a new locale has been added, you can create a new group for accessing that locale in the Editor CP by:

  1. Go to the Groups Manager
  2. Click Create Group at the bottom
  3. Group Name: {locale} Localizers
  4. Access Rules: Localizers:{locale}
  5. Anyone placed in the group will have write access to {locale}

Other Groups

For details on access rules, see the Remora Permissions page, but in summary:

  • Permissions are assigned in the form of Controller:Action, so Developers:add would give permission to the add() action of developers_controller, although some controllers are public and don't check access rules (such as the developers controller)
  • A * grants access to all actions, so Editors:* grants access to everything in the Editor CP
  • *:* grants access to everything and should never be assigned to anything except the admin group
  • There are some "fake actions" that are used, generally identifiable by their capitalization:
Rule Access
Admin:EditAnyAddon Edit the details of any add-on
Admin:EditAnyLocale Edit translations for any locale
Admin:ConfigureAnyAddon Can change an add-on's type, trusted status, and locale info
Admin:lists In addition to /admin/lists, also grants access to /admin/applications, /admin/addontypes, /admin/platforms, and /admin/responses
Editors:DeleteAnyReview Delete any review
Localizers:View View the Localizer CP
Localizers:{locale} Grants write access to {locale}