http://wiki.mipt.ru/index.php?action=history&feed=atom&title=Development%3ANew_permissions_evaluation_in_2.0 2026-05-07T06:00:31Z История изменений этой страницы в вики MediaWiki 1.42.1 http://wiki.mipt.ru/index.php?title=Development:New_permissions_evaluation_in_2.0&diff=11490&oldid=prev 2024-10-21T08:52:52Z

<p>1 версия импортирована</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <tr class="diff-title" lang="ru"> <td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая версия</td> <td colspan="1" style="background-color: #fff; color: #202122; text-align: center;">Версия от 08:52, 21 октября 2024</td> </tr><tr><td colspan="2" class="diff-notice" lang="ru"><div class="mw-diff-empty">(нет различий)</div> </td></tr></table>

Олег Давидович http://wiki.mipt.ru/index.php?title=Development:New_permissions_evaluation_in_2.0&diff=11489&oldid=prev 2010-06-15T19:06:03Z

<p></p> <p><b>Новая страница</b></p><div>{{Infobox Project<br /> |name = New permissions evaluation<br /> |state = Implemented<br /> |tracker = MDL-21710<br /> |discussion = n/a<br /> |assignee = [[User:Petr Škoda (škoďák)|Petr Škoda (škoďák)]]<br /> }}<br /> {{Moodle 2.0}}{{Roles}}<br /> <br /> =Goals=<br /> The main goals are:<br /> # replace current confusing permission evaluation<br /> # improve performance<br /> # enable improvements in permission overriding UI<br /> <br /> =Permission evaluation algorithm=<br /> # find all roles with given capability used in definition or override<br /> # evaluate permissions in given context for each role separately (going from bottom to top in context tree, first found wins unless there is a CAP_PROHIBIT on any level)<br /> # user has capability if he/she has at least one role which evaluated to CAP_ALLOW and at the same time no role which was evaluated to CAP_PROHIBIT<br /> <br /> http://tracker.moodle.org/secure/attachment/19672/Allowed_roles.png<br /> <br /> =Performance improvements=<br /> has_capability() and get_users_by_capability() uses fixed number of queries. The result could be returned as sql query instead of database records.<br /> <br /> = Backwards compatibility=<br /> The only potential problem is CAP_PREVENT in overrides when user has several conflicting roles. Originally this was highlighted as a special feature, unfortunately it was in fact the major source of confusion.<br /> <br /> =See also=<br /> * [[Obsolete:Enrolment rewrite and role tweaks proposal]]<br /> * [[Obsolete:Role overrides revisited]]<br /> * [[Development:New permission overriding UI]]<br /> * [[Development:Role archetypes]]<br /> <br /> [[Category:Developer]]<br /> [[Category:Roles]]</div>

1>Skodak