Products.SimpleGroupsManagement 0.2.0beta

A Plone utility to make possible for non-manager users to handle specific groups and users

Introduction

Have you ever feel the need to give to normal (AKA non-manager) Plone member the power to manage a group?

Right now in Plone you can make this possible playin with the Manage users and Manage Groups permissions of the portal (also for Plone 2.5).

Even playing with those permissions is impossible is to limit the group on which a member (or group of members) can manage.

This products make something very dangerous: with a minimal configuration, a member of the Plone portal (or all members in a group) will be able to manage the users of a group overriding the basic portal security. You only need to go to the portal_properties tool of you portal and modifiy the new simple_groups_management_properties.

In the sgm_data section you need to inser a set of strings like

id1|group_id1
id2|group_id2
...

where id1, id2 can be user or group ids. This mean that the member (or group) id1 will be able to act on the group_id1 members.

You can also insert a list of groups ids that will be never handled by this product in the sgm_never_managed_groups section.

The utility also react to the Add portal members permission. If the current user has this permission you will be able to add new portal members (so no security break for this).

Be aware!

This products override all normal Plone permissions noted above! This can create security black-holes in your portal!

Plone 2.5 support

This product is done to work with the old Plone 2.5 release also. To use it, copy the SimpleGroupsManagement in your Products section.

Similar product

Maybe is a good idea to check also collective.groupdelegation

TODO

• By now the management form is well integrated with Plone 2.5 UI and more ugly on Plone3+. In future: drop Plone 2.5 support, or change this to be more pretty on Plone 3.

• Don’t force the Manager to go in ZMI, but handle configuration from Plone UI.

• Some portalMessage doesn’t work correctly.

Credits

Special thanks to Albert Pallas for beeing the locales-man.

Changelog

0.2.0

• Albert Pallas provided internationalization support

• Again Albert added catalan, spanish and french translations.

• Added italian translation.

0.1.0

• Initial release