Well, reading through that get me to the following text:
Where it is stated that users could be assigned to multiple roles. If this was true, it would make a whole lot more sense to me. But I must be missing something, becuase when I edit a user, I can only select a single role. Selecting a new one doesn't add it to the existing roles of the user, it overwrites the old one.
Sometimes you want a specific user in a role to have a little bit more control than other users in that role, or you can have users that perform multiple roles in an organization. Right now, I can't really set them apart. If person A and B belong to the same role, but person A also needs some privileges that person B shouldn't have, I have to kind of copy the existing role, link that to the profiles I need and assign that new 'mixed' role to the user A. It would be nice if we can assign multiple roles to a single user, like the document stated. Surely we could add this to the UI field and the database, but does the current codebase reflect that in the sense that permissions will be checked against multiple roles at the time permissions need to be checked?
Apart from this 'bug' (or maybe I'm just reading it wrong?) it seems like a very powerfull mechanism.
Hmm, reading on I see:
Quote:Individual users (e.g. John, Mary) might be assigned to one or more roles, where the roles are based on the user's job responsibilities and competencies in the organization. Users should be assigned multiple roles to reflect the fact that some users connect to the system in different function depending on the tasks. For example, user “John” might be assigned the role “Head-Sales”, because John is the head of sales at your company, as well as the role “admin”, because John is also CRM system administrator. If John wants to work as administrator he logs in as “admin”, if John wants to work as head of sales he logs in as “Head-Sales”. It is possible to let John connect to the system with the same password, regardless of whether he acts as administrator or head of sales.
Where it is stated that users could be assigned to multiple roles. If this was true, it would make a whole lot more sense to me. But I must be missing something, becuase when I edit a user, I can only select a single role. Selecting a new one doesn't add it to the existing roles of the user, it overwrites the old one.
Sometimes you want a specific user in a role to have a little bit more control than other users in that role, or you can have users that perform multiple roles in an organization. Right now, I can't really set them apart. If person A and B belong to the same role, but person A also needs some privileges that person B shouldn't have, I have to kind of copy the existing role, link that to the profiles I need and assign that new 'mixed' role to the user A. It would be nice if we can assign multiple roles to a single user, like the document stated. Surely we could add this to the UI field and the database, but does the current codebase reflect that in the sense that permissions will be checked against multiple roles at the time permissions need to be checked?
Apart from this 'bug' (or maybe I'm just reading it wrong?) it seems like a very powerfull mechanism.
Hmm, reading on I see:
Quote:For example, a single standard user can be associated with one or more roles by different user names,Which leads me to thinking that the system is set up so that a single person should have multiple usernames/accounts. I don't really like that approach since it would require people to log out and in and out and in over and over. I think setting multiple roles on a single user would be better.