0.7 - Permissions

Owned by Former user (Deleted)
Last updated: Oct 10, 2006Version comment
4 min read
  • modify_links_from - Allows user to Create/Edit/Delete links from Activities in this site
  • modify_links_to - Allows user to Create/Edit/Delete to Goals in this site
  • view_any_links_from - Allows user to view any links from activities in this site.
  • view_any_links_to - Allows user to view any links to goals in this site.

Viewing the links allows the user to see where the connections are. A complete list of links can be thought of as a curriculum map. The convention of thinking about links and associations as orgininating from the Activity and to the Goal persists in the permission names. In order for a user to actually see a link, that user must be a member of both sites and have a role where they have the appropriate permissions set.
For example, a Program Coordinator would be a member of both a Program worksite and a Class worksite. In the Program worksite (where program goals are published) that user would have the view_any_link_to permission set. In the Class Worksite the same role would have the view_any_link_from permission set.

  • view_visible_links_from - Allows user to view any links flagged as visible from activities in this site (more restrictive than above)
  • view_visible_links_to - Allows user to view any links flagged as visible to goals in this site

This set of permissions is similar to the above permissions with the exception that it only allows the user to see those links flagged as "visible".

Others

The following permissions are NOT components of a permission pair. These permission settings pertain to the site from which Goals are published.

  • view_ratings - Allows user to view ratings for all items submitted for activities linked to Goals in this site. Ratings are only displayed for links that the user has permission to see.
  • view_own_ratings - Allows user to view ratings for items that he/she submitted for activities linked to Goals in this site. Ratings are only displayed for links that the user has permission to see.
  • modify_goalsets - Allows user to Create/Edit/Delete Goal Sets and Goals
  • modify_ratings - Allows user to rate each student's performance for activities that are linked to Goals in this site. Ratings are only modifyable for links that the user has permission to see.

Permission Pairs

In order to provide flexibility and data security, the permission checks performed in the Goal Management tool (and thus all Goal Aware Tools that use the Goal Management helper tool) may be different than those in other tools you have used in Sakai. Since any method called likely interacts with data in two worksites, permission checks are performed in both affected worksites. While it is implied above, let's state it clearly:

Activity Site

Goal Publishing Site

Explanation

modify_links_from

modify_links_to

In order for a user to link an activity in one worksite to a goal published in another worksite, the user has to play a role in both sites.

  • In the worksite where the activity is taking place, the modify_link_from permission must be set for that user's role.
  • In the worksite where the Goal to be linked to is published, the modify_link_to permission must be set for that user's role.
  • BOTH must be true for the permission pair to be satisfied and allow the user to create the link.

view_any_links_from

view_any_links_to

In order for a user to view all links from activities in one worksite to goals published in another worksite , the user has to play a role in both sites.

  • In the worksite where the activity is taking place, the view_any_links_from permission must be set for that user's role.
  • In the worksite where the linked Goal is published, the view_any_links_to permission must be set for that user's role.
  • BOTH must be true for the permission pair to be satisfied and allow the user to view all links.

view_visible_links_from

view_visible_links_to

In order for a user to view all links flagged as visible from activities in one worksite to goals published in another worksite , the user has to play a role in both sites.

  • In the worksite where the activity is taking place, the view_visible_links_from permission must be set for that user's role.
  • In the worksite where the linked Goal is published, the view_visible_links_to permission must be set for that user's role.
  • BOTH must be true for the permission pair to be satisfied and allow the user to view the links.

Furthermore, some of these permissions override others. You may note that it would make no sense to be able to modify_links_to between sites but not be able to view_any_links_to or view_visible_links_to between those sites. It would also not make sense to be able to view_any_links_to between sites but not be able to view_visible_links_to between those sites. The same goes for the *_from side of these pairs.

If the permission modify_links_to is set for a role, that role can view_any_links_to and view_visible_links_to whether or not these other permissions are set.
If the permission view_any_links_to is set for a role, that role can view_visible_links_to whether or not this other permission is set.

If the permission modify_links_from is set for a role, that role can view_any_links_from and view_visible_links_from whether or not these other permissions are set.
If the permission view_any_links_from is set for a role, that role can view_visible_links_from whether or not this other permission is set.

If the permission modify_ratings is set for a role, that role can view_ratings and view_own_ratings whether or not these other permissions are set.
If the permission view_ratings is set for a role, that role can view_own_ratings whether or not this other permission is set.