[ckan-dev] CKAN 2 permissions / publisher mode question

[Joshua Tauberer]

On 02/04/2013 06:57 AM, Sean Hammond wrote:
> This publisher mode is no longer used in CKAN 2.0. 2.0 has a new 
> "organizations" feature, enabled by default, that does what the 
> publisher mode did and more.

Hi, Sean. This is great, and much better/easier than the old auth system.

After some digging I saw some options that are also critical for a 
publisher mode that would need to be set to false:

     ckan.auth.create_dataset_if_not_in_organization = false
     ckan.auth.user_create_organizations = false

I think these two would be enough to prevent anonymous users from 
registering and creating datasets.

But I don't know if there are other things registered user can do, or 
will be able to do in the future. So I really don't want users 
registering at all.

So I just submitted a pull request to create a new option 
ckan.auth.create_user that would prevent all new user registrations. The 
idea would be that in a locked-down publisher mode, you would create the 
users you need first and then set this option to false to prevent 
further users from being created.

This is pretty important for us at hub.healthdata.gov, so I hope you'll 
consider it for 2.0.

https://github.com/okfn/ckan/pull/356

Thanks,

-- 
- Joshua Tauberer
- http://razor.occams.info

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20130205/278826c2/attachment-0001.html>