In KNL-1015, I suggest extending formattedtext to have a new argument, profile. This should be a text string, which would cause antisamy to be called with that profile. I'm open to how to interpret it. Probably there should be predefined profile names that would then by mapped to an XML file that the site could change.

Intended use: Lessons currently distinguishes content supplied by instructors and students. Instructors should be able to prepare content fairly freely. However students shouldn't have to trust other students to be smart about security. Instructors can author primary content pages. Students can author comments, but there are also student content pages that look much like instructor content page. Other students can then comment on them (and shortly, use rubrics to assess them).

Currently student content always passes through the formattedtext filter. Whether instructor content does or not depends upon a setting in sakai.properties, which can be overridden for an individual instance on the tool by an administrator.

I would prefer to have the option of doing some checking for instructors, but allow more types of content.

I make this request without understanding anti-samy. But discussions have suggested that a default might prohibit embed and object. Many sites would probably like instructors to be able to use that (although Lessons has the ability to do its own embedded objects). However if there are significant security issues they might prefer for students not to be able to do that.