ZenMagick admin access control
One feature requested for integration with ZenMagick is the admin profiles mod.
I think it is a really useful thing to have, in particular if the project is going to target not just one-man shops.
Since the admin UI will be based on the ZenMagick MVC code, I would suggest that access control is integrated there. Of the top of my head this is the list of requirements to get this implemented:
- display/hide top level menus according to groups/roles
- disable all pages unless explicitely enabled for group/role
- assign admin user to role/group
- implement using ZMSacsManager
So, I think the requirements are pretty much the same as for the existing mod. There would be one improvement, though: It will be possible to set up roles. Roles are a group of predefined permissions. Then a user can be assigned to one (or more) roles and automatically have the permissions of those roles. Permissions would be or’ed, so if one role gives permission to a particular page while the other doesn’t, then permission is granted.
Additional suggestions/improvements welcome…
