Martin Vidner schrieb:
On Mon, Jun 15, 2009 at 12:10:12PM +0200, Stefan Schubert wrote:
So it makes no sense for the admin who has to set the concerning rights setting each single language right for each user. He only wants to set that the user has read or write access.
We can solve this by using structured name:
org.opensuse.yast.modules.yapi.language.getlanguages org.opensuse.yast.modules.yapi.language.getcurrentlanguage
Should become:
org.opensuse.yast.modules.yapi.language.get-languages org.opensuse.yast.modules.yapi.language.get-currentlanguage
So we are able to generate a tree structure of the rights like get -languages -currentlanguage
Which can be shown in the UI and the admin has to select the root branch "get" or "set" only in order to change the permission for all "child" rights. This will be handled by the permission rest-service of WebYaST.
So you're introducing a regrouping of the action ID, by dashes instead of by dots.
I actually thought that it was a bug, so I fixed it in the webclient: http://git.opensuse.org/?p=projects/yast/web-client.git;a=commitdiff;h=c9af4...
Ähm, that was intent as I described in an EMAIL before. As far I remember I have had problems with the polkit-auth command while setting these single permissions separated by dots. I believe that it has to do with polkit-filename which describes the rights.
I think that it is a futile attempt to overcome the initial problem of having too many permissions to deal with.
Thats my main aim to reduce the amount of permissions :-)
How about removing them instead? That means not having the complete "API" of YaST accessible via DBus, but it is not a real API anyway. Instead, we should build the API to fit the permissions.
My intention is to have one permission file for the REST AND the DBUS interface. Thats why I would like to use this tree structure in order to make it simple. Greetings Stefan -- ******************************************************************************* Stefan Schubert SUSE LINUX GmbH - Maxfeldstrasse 5 - D-90409 Nuernberg, Germany e-mail: schubi@suse.de ------------------------------------------------------------------------------- SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org