[ckan-dev] CKAN.AUTH full list

Tue Mar 26 14:56:37 UTC 2019

In addition to what Stefan said, the user lists is only available to logged
in users in CKAN 2.8, and there is work under way to limit it to sysadmins
on the next version:

https://github.com/ckan/ckan/pull/4654

Adrià

On Tue, 26 Mar 2019 at 00:07, Judith Moran <Judith.Moran at nt.gov.au> wrote:

> Hi,
>
>
>
> Thanks very much for the reply. I will research the plugin you have
> provided a link to.
>
>
>
> Jud,
>
>
>
> *From:* ckan-dev [mailto:ckan-dev-bounces at lists.okfn.org] *On Behalf Of *Stefan
> Oderbolz
> *Sent:* Monday, 25 March 2019 5:43 PM
> *To:* CKAN Development Discussions <ckan-dev at lists.okfn.org>
> *Subject:* Re: [ckan-dev] CKAN.AUTH full list
>
>
>
> Hi Jud
>
>
>
> I think the full list is in the documentation:
> https://docs.ckan.org/en/ckan-2.7.3/maintaining/authorization.html
>
>
>
> As for the user list: yes this is the default behavior. If you want to
> change that, you'd need an plugin to implement the IAuthFunctions interface
> (
> https://docs.ckan.org/en/ckan-2.7.3/extensions/plugin-interfaces.html#ckan.plugins.interfaces.IAuthFunctions)
> and change the permission for that call.
>
>
>
> Hope this helps.
>
>
>
> - Stefan
>
>
>
> On Mon, Mar 25, 2019, 02:12 Judith Moran <Judith.Moran at nt.gov.au> wrote:
>
> Hi,
>
>
>
> Also is it standard for CKAN to allow public list of all members.
>
>
>
> If you type data.gov.au/user a full list of users appears.
>
>
>
> Also worked out how to make a user an admin for an Org ONLY.
>
>
>
> BUT can someone point me to a full list of ckan.auth.xxxx  available.
>
>
>
>
>
>
>
>
>
> *From:* Judith Moran
> *Sent:* Monday, 25 March 2019 10:07 AM
> *To:* 'CKAN Development Discussions' <ckan-dev at lists.okfn.org>
> *Subject:*
>
>
>
> Hi,
>
>
>
> We have the following settings for ckan.auth
>
>
>
> ## Authorization Settings
>
>
>
> ckan.auth.anon_create_dataset = false
>
> ckan.auth.create_unowned_dataset = false
>
> ckan.auth.create_dataset_if_not_in_organization = false
>
> ckan.auth.user_create_groups = false
>
> ckan.auth.user_create_organizations = false
>
> ckan.auth.user_delete_groups = true
>
> ckan.auth.user_delete_organizations = true
>
> ckan.auth.create_user_via_api = false
>
> ckan.auth.create_user_via_web = true
>
> ckan.auth.roles_that_cascade_to_sub_groups = admin
>
>
>
>
>
> How do we set the authorizations that a user can be administrator only for
> his organisation.  At the moment if we make a person admin they can manage
> all organisaitons.
>
>
>
> I have search for a full list of ckan.auth.xxxx  options but can’t find
> them anywhere.
>
>
>
> Hopefully someone can assist.
>
>
>
>
>
> Jud Moran.
>
> _______________________________________________
> ckan-dev mailing list
> ckan-dev at lists.okfn.org
> https://lists.okfn.org/mailman/listinfo/ckan-dev
> Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
>
> _______________________________________________
> ckan-dev mailing list
> ckan-dev at lists.okfn.org
> https://lists.okfn.org/mailman/listinfo/ckan-dev
> Unsubscribe: https://lists.okfn.org/mailman/options/ckan-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.okfn.org/pipermail/ckan-dev/attachments/20190326/cdf67baa/attachment-0002.html>