|
create a usergroups file
1) create xml-file
create a text-file and rename it to "myfile.xml". then open created file with any text-editor and add the following code:
2) add root-node
<?xml version="1.0" encoding="ISO-8859-1"?>
<usergrouplib>
...
</usergrouplib>
 | root-node must be lowercase and must be named "usergrouplib" (name of tag will become name of library-token) |
| attributes of root-node will be ignored |
3) add child-nodes
<?xml version="1.0" encoding="ISO-8859-1"?>
<usergrouplib>
<usergroup name="admin" ... >&
...
lt;/usergroup>
<usergroup name="redactor" ... >
...
</usergroup>
</usergrouplib>
| child nodes must be lowercase and must be named "usergroup" |
| you may define any attributes for tags |
| "name"-attribute of "usergroup"-nodes must be set, must be UNIQUE and not a numeric value ("access"-attribute must not be set) |
4) add access-rights library
<usergroup name="redactor" ... >
<accesslib>
...
</accesslib>
</usergroup>
| root node of access-library must be lowercase and must be named "accesslib" |
| attributes will be ignored |
5) add access-rights
<usergroup name="redactor" ... >
<accesslib>
<access name="news" value="admin"/>
<access name="users" value="admin"/>
</accesslib>
</usergroup>
| child nodes must be lowercase and must NOT be named like one of the above mentioned tags. |
| you may define any attributes for tags |
| "name"-attribute must be set, must be UNIQUE and not a numeric value |
| "value"-attribute must be set and can have any value (not only create,read,update,delete) for more flexibility (e.g. publish, unlock, batch, guest) |
putting 'userlib' and 'usergrouplib' into the same file
you may put user-library and access-rights library in the same XML-file. As you know, and XML-file can only have ONE root node - therefore you must add an additional tag if you put all security information into the same file:
<?xml version="1.0" encoding="ISO-8859-1"?>
<security>
<userlib>
...
</userlib>
<usergrouplib>
...
</usergrouplib>
</security>
| root node can have any name - its attributes may be accessed using a token with the following structure: |
{mpf:[node name]/[attribute name]}
| 
