Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Row Level Permissions #34

Open
pedersen opened this issue Feb 10, 2013 · 2 comments
Open

Row Level Permissions #34

pedersen opened this issue Feb 10, 2013 · 2 comments

Comments

@pedersen
Copy link
Member

Hopefully, this link will work:

https://groups.google.com/forum/?hl=en&fromgroups=#!topic/turbogears/J-LHtyjJh_0

A weak spot in TG is the lack of row-level permissions. We have URL based, but row level is non-existent. Having a method which would allow for a user to have ownership and/or permission for a given specific database row would be incredibly helpful.

With the advent of (and expanding use) NoSQL databases like Mongo, this is becoming even more of a requirement.

I'm not sure of the best answer, either. With RDBMS setups, the way to define such permissions is not clearly done. Should we add them as a field at the end of the row? Should we have an associated table for each possible table? Should we have a separate table which handles nothing but permissions? It's awkward.

With Mongo, it's easier: Have a separate set of fields in the document that encapsulates the permissions.

With that in mind, I'm leaning towards having the permissions be a json encoded object at the end of the row, and having something that simply knows how to handle that object. What does everybody else think?

@lebouquetin
Copy link

I'm interested in this feature. I believe a separate table managing permissions on each row whould be very flexible: it decorrelates right management from business logic / stuff. Supposing you manage ACL on several table objects, you may be able to get all your rights through one single query (and really do "what you want" for acl management, for example manage acl on compound objects).

@amol-
Copy link
Member

amol- commented Feb 17, 2014

Just reporting here that there is discussion underoing on the ML for a tgext.* package that might implement this feature: https://groups.google.com/d/msg/turbogears/AIzNuWC7y8o/3N7RemeKwKgJ

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants