FreeLists / dokuwiki / [dokuwiki] Multiple admins and managers through ACLs

[Guy Brand <gb@xxxxxxxxxxxxxxxxx>]

Hello,


I have a patch around which allows comma separated lists in
$conf['superuser'] and $conf['manager']. We can already use a group
when several admins are needed by turning:

  $conf['superuser'] = 'john';

into:

  $conf['superuser'] = '@admins';

where @admins contains 'john' and other users with admin rights.
Sometimes, using a group moves the problem without solving it in a
simple way. One would prefer being able to use:

  $conf['superuser'] = 'john,alice,@admins,bob';

(and the same for $conf['manager']).

Now before going further with the patch to allow such lists, I have a
simple question : why not relying on our ACLs to identify the admins
(and managers) or a wiki using ACLs?

Using userlevel 255 (i.e. AUTH_ADMIN rights) in an acl.auth.php file
is currently not very useful. Could we imagine that admins would be
selected based on an ACL (or several) inside the acl.auth.php file?
This would be more simple and more flexible:

  *       john       255
  *       alice      255
  *       @admins    255
  *       bob        255

Same could apply to manager's rights which could have a new ACL level
(for example AUTH_MANAGER = 127) usable inside acl.auth.php file to
allow managers.

For wikis without ACLs ($conf['useacl'] = 0) we could go on with a
single valued $conf['superuser'], but as soon as useacl=1 we could
rely on ACLs to find admins (and managers).

Does this makes sense to you? Anything I missed which goes against
such a change? Opinions?

Regards,

-- 
  bug

-- 
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist