Products.SimpleGroupsManagement 0.1.0alpha

A Plone utility to make possible for non-manager users to handle specific groups and users

Introduction
============

Have you ever feel the need to give to normal (AKA non-manager) Plone member the power to manage a group?

Right now in Plone you can make this possible playin with the **Manage users** and **Manage Groups**
permissions of the portal (also for Plone 2.5).

What is (obviously) impossible is to limit the group on which a member can add.

This products make something very dangerous: with a minimal configuration a member of the Plone portal
(or all members in a group) will be able to manage the users of a group overriding the portal security.
You only need to go to the *portal_properties* tool of you portal and modifiy the new
**simple_groups_management_properties**.

In the *sgm_data* section you need to inser a set of strings like

::

id1|group_id1
id2|group_id2
...

where id1, id2 can be user or group ids. This mean that the member (or group) id1 will be able to act on the
group_id1 members.

You can also insert a list of groups ids that will be never handled by this product in the
**sgm_never_managed_groups** section.

The utility also react to the **Add portal members** permission. If the current user has this permission
you will be able to add new portal members (so no security break for this).

Be aware!
---------

This products override all normal Plone permissions noted above!
This can create **security black-holes** in your portal!

.. figure:: http://keul.it/images/Black_Hole_Milkyway.jpg
:scale: 50

Plone 2.5 support
-----------------

This product is done to work with the old Plone 2.5 release also. To use it, copy the *SimpleGroupsManagement*
in your *Products* section.


Changelog
=========

0.1.0
-----

* Initial release