[Hidden-tech] Best CMS for custom user permissions

[dan at danielpaquin.com]

I have similar needs and decided on Mezzanine/Django. Super quick stand 
up and then full customization as its a standard Django project. Of 
course its a Python option.

On 2015-11-12 19:03, Greg Perham wrote:
> _WordPress vs. Drupal vs. other_ question for you all:
>
> I'd like to know, in a general sort of way, how you would go about
> configuring your CMS of choice for this scenario. Is the CMS built in
> a way that easily facilitates this? What are the broad-stroke steps
> you would perform to set it up?
>
> Guests (visitors not logged in):
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read _public_ Community Calendar events
> - cannot read _private_ Community Calendar events
>
> Community:
>
> - cannot read Staff Blog
> - cannot read Staff Calendar events
> - can read _public_ Community Calendar events
> - can read _private_ Community Calendar events
>
> Staff:
> - can read Staff Blog
> - cannot create Staff Blog posts
> - can create Staff Calendar events
> - can read all Community events
> - can create Community events
>
> Staff Contributor:
> - can read everything
> - can create Staff Blog posts and all event types
> - cannot edit Pages, etc
>
> - Staff Blog not included in any RSS feeds or sitemap
> - _private_ Community events not included in any RSS feeds or sitemap
>
> WordPress does have User Roles and a permissions system. The most
> straight forward solution would be to create custom Roles and
> permissions and then hide posts/events from being displayed, but that
> doesn't block them from feeds and can lead to situations where you're
> expecting 10 blog posts on a page and only get 8 because 2 of those
> queried were skipped from display; it doesn't work on a category-wide
> level, and certainly doesn't have any affect on creating posts. I
> think you'd have to do some intricate work with `pre_get_posts` and
> (forthcoming) taxonomy meta to truly block posts everywhere, and
> create a front-end content creation interface to have the best 
> control
> over that aspect. In all, quite clunky and labor-intensive.
>
> I wrote a plugin that will do a much simplified version of this for
> WP's built-in post categories using
> `current_user_can('read_private_posts')`, but it falls far short of
> the requirements above.
>
> So, do other CMSes have an integrated system for this sort of thing,
> where you can control content visibility/editability/creation by
> content type _and_ taxonomy? I've been told one of the major selling
> points of Drupal is the permissions system. Am I overlooking a scheme
> for an elegant solution in WP?
>
> And…go! :)
>
> Regards,
> Greg
>
>
> _______________________________________________
> Hidden-discuss mailing list - home page: http://www.hidden-tech.net
> Hidden-discuss at lists.hidden-tech.net
>
> You are receiving this because you are on the Hidden-Tech Discussion 
> list.
> If you would like to change your list preferences, Go to the Members
> page on the Hidden Tech Web site.
> http://www.hidden-tech.net/members