[ckan-dev] CKAN.AUTH full list

Judith Moran Judith.Moran at nt.gov.au
Mon Mar 25 23:07:41 UTC 2019


Hi,

Thanks very much for the reply. I will research the plugin you have provided a link to.

Jud,

From: ckan-dev [mailto:ckan-dev-bounces at lists.okfn.org] On Behalf Of Stefan Oderbolz
Sent: Monday, 25 March 2019 5:43 PM
To: CKAN Development Discussions <ckan-dev at lists.okfn.org>
Subject: Re: [ckan-dev] CKAN.AUTH full list

Hi Jud

I think the full list is in the documentation: https://docs.ckan.org/en/ckan-2.7.3/maintaining/authorization.html

As for the user list: yes this is the default behavior. If you want to change that, you'd need an plugin to implement the IAuthFunctions interface (https://docs.ckan.org/en/ckan-2.7.3/extensions/plugin-interfaces.html#ckan.plugins.interfaces.IAuthFunctions) and change the permission for that call.

Hope this helps.

- Stefan

On Mon, Mar 25, 2019, 02:12 Judith Moran <Judith.Moran at nt.gov.au<mailto:Judith.Moran at nt.gov.au>> wrote:
Hi,

Also is it standard for CKAN to allow public list of all members.

If you type data.gov.au/user<http://data.gov.au/user> a full list of users appears.

Also worked out how to make a user an admin for an Org ONLY.

BUT can someone point me to a full list of ckan.auth.xxxx  available.



[cid:image001.png at 01D4E2F7.69E71B60]

From: Judith Moran
Sent: Monday, 25 March 2019 10:07 AM
To: 'CKAN Development Discussions' <ckan-dev at lists.okfn.org<mailto:ckan-dev at lists.okfn.org>>
Subject:

Hi,

We have the following settings for ckan.auth

## Authorization Settings

ckan.auth.anon_create_dataset = false
ckan.auth.create_unowned_dataset = false
ckan.auth.create_dataset_if_not_in_organization = false
ckan.auth.user_create_groups = false
ckan.auth.user_create_organizations = false
ckan.auth.user_delete_groups = true
ckan.auth.user_delete_organizations = true
ckan.auth.create_user_via_api = false
ckan.auth.create_user_via_web = true
ckan.auth.roles_that_cascade_to_sub_groups = admin


How do we set the authorizations that a user can be administrator only for his organisation.  At the moment if we make a person admin they can manage all organisaitons.

I have search for a full list of ckan.auth.xxxx  options but can’t find them anywhere.

Hopefully someone can assist.


Jud Moran.
_______________________________________________
ckan-dev mailing list
ckan-dev at lists.okfn.org<mailto:ckan-dev at lists.okfn.org>
https://lists.okfn.org/mailman/listinfo/ckan-dev
Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20190325/577a49a2/attachment-0002.html>


More information about the ckan-dev mailing list