[MGNLFORUM-216] As a Forum-Admin or -moderator (or user), i have more fine-granular security with custom permissions for the forum workspace Created: 10/Jan/14  Updated: 12/Nov/18  Resolved: 12/Nov/18

Status: Closed
Project: Forum (closed)
Component/s: moderation, security
Affects Version/s: 3.1, 3.2
Fix Version/s: Ideas

Type: Story Priority: Neutral
Reporter: Christoph Meier Assignee: Christoph Meier
Resolution: Obsolete Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
dependency
depends upon MGNLUI-2560 As an admin, I can register custom pe... Closed
relation
is related to MGNLFORUM-203 As an administrator I want to give us... Closed
Template:
Acceptance criteria:
Empty

 Description   

As a Forum-Admin or -moderator (or user), i have more fine-granular security with custom permissions (e.g. "Modearate&Post") for the forum workspace

Make sure, that the Forum-modules registers it specific permission to the config. of the security-app.
This will allow to specify the specific forum-roles like it was possible with Magnolia 4.5 (see attachment).

Because these are special permissions, they cannot be mapped to standard JCR-permissions, that's why "every" code-execution must be checked security-wise using the "old" security-interface (e.g. things like PermissionUtil.isGranted(((Content) message).getJCRNode(), ForumConfiguration.MODERATE_PERMISSION)).
Make sure that new actions and or commands take this into account.


Generated at Mon Feb 12 02:01:48 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.