head	1.5;
access;
symbols
	TIGRIS_1_1_0RC2:1.4
	TIGRIS_1_1_0RC1:1.4
	TIGRIS_1_1:1.4.0.4
	TIGRIS_1_0_8:1.4
	TIGRIS_1_0_8RC3:1.4
	TIGRIS_1_0_8RC2:1.4
	TIGRIS_1_0_8RC1:1.4
	TIGRIS_1_0_7:1.4
	TIGRIS_1_0_7RC3:1.4
	TIGRIS_1_0_7RC2:1.4
	TIGRIS_1_0_7RC1:1.4
	TIGRIS_1_0_6:1.4
	TIGRIS_1_0_6RC5:1.4
	TIGRIS_1_0_6RC4:1.4
	TIGRIS_1_0_6RC3:1.4
	TIGRIS_1_0_6RC2:1.4
	TIGRIS_1_0_6RC1:1.4
	TIGRIS_1_0_5:1.4
	TIGRIS_1_0_5RC6:1.4
	TIGRIS_1_0_5RC5:1.4
	TIGRIS_1_0_5RC4:1.4
	TIGRIS_1_0_5RC3:1.4
	TIGRIS_1_0_5RC2:1.4
	TIGRIS_1_0_5RC1:1.4
	TIGRIS_1_0_4:1.4
	TIGRIS_1_0_3:1.4
	TIGRIS_1_0_2:1.4
	TIGRIS_1_0_1:1.4
	TIGRIS_1_0:1.4.0.6
	TIGRIS_1_0_0:1.4
	TIGRIS_1_0_0_RC1:1.4.0.2;
locks; strict;
comment	@# @;


1.5
date	2001.05.11.20.43.18;	author leonardr;	state Exp;
branches;
next	1.4;

1.4
date	2001.03.26.21.17.25;	author leonardr;	state Exp;
branches;
next	1.3;

1.3
date	2001.03.26.03.06.18;	author leonardr;	state Exp;
branches;
next	1.2;

1.2
date	2001.03.23.00.03.08;	author leonardr;	state Exp;
branches;
next	1.1;

1.1
date	2001.03.16.07.45.13;	author davidp;	state Exp;
branches;
next	;


desc
@@


1.5
log
@Private Mailing List - View belongs to Observer and up, not only to Observer.
@
text
@#Actions lost to roles -- see removeRoleActions.sql

#Actions gained by roles
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, 
               HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and (
                (HELM_ROLE.NAME="Anonymous Guest" and HELM_ACTION.NAME in 
                 ("Domain - Join"))
                or
                 (HELM_ROLE.NAME in ("Observer", "Developer", 
                                     "Content Developer")
                  and HELM_ACTION.NAME in 
                  ("Private Mailing List - View"))
                or 
                 (HELM_ROLE.NAME="Project Owner" and HELM_ACTION.NAME in 
                  ("Private Mailing List - View", "Project Download - Edit", 
	           "Project News - Edit"))
                or 
                 (HELM_ROLE.NAME="Domain Admin" and HELM_ACTION.NAME in 
                  ("Private Mailing List - View", "Domain - Administer", 
                   "Project - Lock", "Session - List"))
                or 
                 (HELM_ROLE.NAME="Host Admin" and HELM_ACTION.NAME in 
                  ("Private Mailing List - View", "Domain - Administer"))
               )
;
@


1.4
log
@Moved removal of actions from roles into a perl script.
@
text
@d13 3
a15 1
                 (HELM_ROLE.NAME="Observer" and HELM_ACTION.NAME in 
d19 2
a20 1
                  ("Project Download - Edit", "Project News - Edit"))
d23 2
a24 1
                  ("Domain - Administer", "Project - Lock", "Session - List"))
d27 1
a27 1
                  ("Domain - Administer"))
@


1.3
log
@The semicolons are breeding!
@
text
@d1 1
a1 7
#Actions lost to roles. 

select "delete from HELM_ROLE_ACTION_RESOURCE where ROLE_ID = ", ROLE_ID, 
" AND ACTION_ID = ", ACTION_ID, ";" from HELM_ROLE, HELM_ACTION where 
  (HELM_ROLE.NAME="Anonymous Guest" and HELM_ACTION.NAME in ("Project - View", "Project Issue Tracking - Submit")
 or
  (HELM_ROLE.NAME="Registered User" and HELM_ACTION.NAME = "Project Issue Tracking - Submit"));
@


1.2
log
@BroadcastMessage now requires Domain - Administrate, and there are now roles that actually have that permission.
@
text
@d11 2
a12 1
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
d26 1
a26 1
                  ("Domain - Administer", "Project - Lock", "Session - List"));
d30 1
a30 1
               );
@


1.1
log
@First pass, untested.  Commiting now to allow others to edit.
@
text
@d25 5
a29 1
                  ("Project - Lock", "Session - List")));
@

