Rights for new user

Finally someone that thinks like me ;-) I'll try to get this in for 0.8, we'll see what other developers think.

i, agree with this subject that the new user must not have full rights, but have different idea for solve this.
IMO, we must have some groups with default rights, that not deletable, such as Administrators, Guests. so when a new user created it must be member of Guests, and the user ACL's are empty for first time.

default groups not deletable, but there's ACL's can be change, except Administrators for ex.

Just a status update, now users are created with 0 permissions, still haven't created the default group that users will be added to, won't be a problem to do, admins don't need groups since they have a special right level, anything else is really just up 2 the site admin.

I'm going to make that default group both deletable and allow people to rename it and in the admin section we'll allow people to pick what group is the default one if any, flexible and should work fine.

Wouldn't be better if we just 'drop' the 'true' value in the Info.php file? that way automatically all ACL will be added to the DB as 'false'.

Currently we have this:

 $acls = array(
            'default'          => 'true',
            'AddFriend'        => 'true',
            'EditFriend'       => 'true',
            'DeleteFriend'     => 'true',
            'UpdateProperties' => 'true',
        );

IMHO, would be better to just have:

 $acls = array(
            'default'          
            'AddFriend'        
            'EditFriend'       
            'DeleteFriend'     
            'UpdateProperties' 
        );

Which could be the same as:

 $acls = array(
            'default'          => 'false',
            'AddFriend'        => 'false',
            'EditFriend'       => 'false',
            'DeleteFriend'     => 'false',
            'UpdateProperties' => 'false',
        );

yeah go ahead and do it, me likes ;)

Tho I think all our gadgets use flase by default now (via the key part tho), we should change so that people have to pass a boolean, that way if we get string as the value then we know it's suppose to be false by default.

Ok, I've commited the last changes which are:

• Current gadgets don't include the 'false/true' value.
• JawsGadgetInfo? checks if the ACLs that are declared via the PopulateACLs method have a value, if they don't have a value false is used.

With these changes I think this ticket can be closed.

No don't just yet, we haven't added the default group thing :-)

Just thinking along the lines that the group would be called "users" and has no permissions and when adding users this group is auto choosen (if id 1 exists then pick it in the dropdown menu, else pick the empty value in the select) ... That should be enough to fullfil this request :)

Ok, I've commited the following changes to the SVN:

• When installGadget is called, create a new 'users' group
• Add an extra field to the groups table for knowing if a group can be removed (aka, those groups created in the install process).

Please make your tests and if it works Ok close this ticket :-)

Ali, can you help me testing this ticket so we can close it? ;-)