head	1.55;
access;
symbols
	TIGRIS_1_1_0RC2:1.38.6.2
	TIGRIS_1_1_0RC1:1.38.6.2
	TIGRIS_1_1:1.38.6.2.0.2
	TIGRIS_1_0_8:1.38.6.2
	TIGRIS_1_0_8RC3:1.38.6.2
	TIGRIS_1_0_8RC2:1.38.6.2
	TIGRIS_1_0_8RC1:1.38.6.2
	TIGRIS_1_0_7:1.38.6.2
	TIGRIS_1_0_7RC3:1.38.6.2
	TIGRIS_1_0_7RC2:1.38.6.2
	TIGRIS_1_0_7RC1:1.38.6.1
	TIGRIS_1_0_6:1.38.6.1
	TIGRIS_1_0_6RC5:1.38.6.1
	TIGRIS_1_0_6RC4:1.38.6.1
	TIGRIS_1_0_6RC3:1.38.6.1
	TIGRIS_1_0_6RC2:1.38.6.1
	TIGRIS_1_0_6RC1:1.38.6.1
	TIGRIS_1_0_5:1.38
	TIGRIS_1_0_5RC6:1.38
	TIGRIS_1_0_5RC5:1.38
	TIGRIS_1_0_5RC4:1.38
	TIGRIS_1_0_5RC3:1.38
	TIGRIS_1_0_5RC2:1.38
	TIGRIS_1_0_5RC1:1.38
	TIGRIS_1_0_4:1.38
	TIGRIS_1_0_3:1.38
	TIGRIS_1_0_2:1.38
	TIGRIS_1_0_1:1.38
	TIGRIS_1_0:1.38.0.6
	TIGRIS_1_0_0:1.38
	TIGRIS_1_0_0_RC1:1.38.0.2
	dlr:1.1.1
	TIGRIS_0_9_2_4:1.25.2.1
	TIGRIS_0_9_2_3:1.25.2.1
	HELM_PEER_PORT_BRANCH:1.1.1.2
	TURBINE_PEER:1.25
	TIGRIS_0_9_2_1:1.25
	TIGRIS_0_9_2:1.25.0.2
	TIGRIS_0_9_0:1.22.0.2
	TIGRIS_0_8_4:1.15.0.2
	NEWHELM:1.1.1.1
	TIGRIS_NOV_12_2000:1.1.1;
locks; strict;
comment	@# @;


1.55
date	2001.08.28.01.07.01;	author dlr;	state Exp;
branches;
next	1.54;

1.54
date	2001.08.27.22.57.03;	author dlr;	state Exp;
branches;
next	1.53;

1.53
date	2001.08.27.21.13.19;	author dlr;	state Exp;
branches;
next	1.52;

1.52
date	2001.08.13.21.08.14;	author leonardr;	state Exp;
branches;
next	1.51;

1.51
date	2001.07.30.18.40.42;	author leonardr;	state Exp;
branches;
next	1.50;

1.50
date	2001.07.16.03.54.25;	author jrobbins;	state Exp;
branches;
next	1.49;

1.49
date	2001.07.11.17.38.15;	author leonardr;	state Exp;
branches;
next	1.48;

1.48
date	2001.07.09.18.17.08;	author leonardr;	state Exp;
branches;
next	1.47;

1.47
date	2001.07.09.16.01.18;	author leonardr;	state Exp;
branches;
next	1.46;

1.46
date	2001.07.05.22.21.40;	author leonardr;	state Exp;
branches;
next	1.45;

1.45
date	2001.07.02.18.56.43;	author leonardr;	state Exp;
branches;
next	1.44;

1.44
date	2001.06.29.17.39.04;	author leonardr;	state Exp;
branches;
next	1.43;

1.43
date	2001.06.29.00.57.49;	author leonardr;	state Exp;
branches;
next	1.42;

1.42
date	2001.06.06.21.50.24;	author dlr;	state Exp;
branches;
next	1.41;

1.41
date	2001.06.04.19.58.06;	author leonardr;	state Exp;
branches;
next	1.40;

1.40
date	2001.06.04.19.53.22;	author leonardr;	state Exp;
branches;
next	1.39;

1.39
date	2001.05.02.20.50.13;	author dlr;	state Exp;
branches;
next	1.38;

1.38
date	2001.03.23.00.03.09;	author leonardr;	state Exp;
branches
	1.38.6.1;
next	1.37;

1.37
date	2001.03.15.19.19.29;	author leonardr;	state Exp;
branches;
next	1.36;

1.36
date	2001.03.09.22.54.33;	author leonardr;	state Exp;
branches;
next	1.35;

1.35
date	2001.03.09.01.24.23;	author leonardr;	state Exp;
branches;
next	1.34;

1.34
date	2001.03.08.21.48.05;	author edk;	state Exp;
branches;
next	1.33;

1.33
date	2001.03.08.21.34.09;	author leonardr;	state Exp;
branches;
next	1.32;

1.32
date	2001.03.08.19.05.38;	author leonardr;	state Exp;
branches;
next	1.31;

1.31
date	2001.03.07.18.08.38;	author leonardr;	state Exp;
branches;
next	1.30;

1.30
date	2001.02.27.01.11.34;	author dlr;	state Exp;
branches;
next	1.29;

1.29
date	2001.02.27.01.08.12;	author dlr;	state Exp;
branches;
next	1.28;

1.28
date	2001.02.27.00.50.45;	author dlr;	state Exp;
branches;
next	1.27;

1.27
date	2001.02.21.01.08.28;	author dlr;	state Exp;
branches;
next	1.26;

1.26
date	2001.01.30.06.43.10;	author jrobbins;	state Exp;
branches;
next	1.25;

1.25
date	2001.01.18.18.04.06;	author jrobbins;	state Exp;
branches
	1.25.2.1
	1.25.4.1;
next	1.24;

1.24
date	2001.01.08.19.37.09;	author leonardr;	state Exp;
branches;
next	1.23;

1.23
date	2000.12.30.04.58.58;	author elicia;	state Exp;
branches;
next	1.22;

1.22
date	2000.12.19.02.39.10;	author elicia;	state Exp;
branches;
next	1.21;

1.21
date	2000.12.13.02.32.07;	author leonardr;	state Exp;
branches;
next	1.20;

1.20
date	2000.12.11.18.07.42;	author leonardr;	state Exp;
branches;
next	1.19;

1.19
date	2000.12.08.02.19.04;	author leonardr;	state Exp;
branches;
next	1.18;

1.18
date	2000.12.07.18.15.26;	author leonardr;	state Exp;
branches;
next	1.17;

1.17
date	2000.12.05.22.09.42;	author leonardr;	state Exp;
branches;
next	1.16;

1.16
date	2000.12.04.23.40.42;	author leonardr;	state Exp;
branches;
next	1.15;

1.15
date	2000.11.30.23.56.01;	author leonardr;	state Exp;
branches
	1.15.2.1;
next	1.14;

1.14
date	2000.11.30.21.59.47;	author leonardr;	state Exp;
branches;
next	1.13;

1.13
date	2000.11.28.23.29.19;	author leonardr;	state Exp;
branches;
next	1.12;

1.12
date	2000.11.28.21.41.38;	author leonardr;	state Exp;
branches;
next	1.11;

1.11
date	2000.11.22.02.05.29;	author edk;	state Exp;
branches;
next	1.10;

1.10
date	2000.11.21.18.48.52;	author leonardr;	state Exp;
branches;
next	1.9;

1.9
date	2000.11.20.22.06.48;	author leonardr;	state Exp;
branches;
next	1.8;

1.8
date	2000.11.17.20.40.50;	author leonardr;	state Exp;
branches;
next	1.7;

1.7
date	2000.11.16.16.59.39;	author leonardr;	state Exp;
branches;
next	1.6;

1.6
date	2000.11.16.00.29.09;	author stack;	state Exp;
branches;
next	1.5;

1.5
date	2000.11.14.23.07.37;	author leonardr;	state Exp;
branches;
next	1.4;

1.4
date	2000.11.13.22.39.52;	author leonardr;	state Exp;
branches;
next	1.3;

1.3
date	2000.11.13.18.32.20;	author leonardr;	state Exp;
branches;
next	1.2;

1.2
date	2000.11.13.15.56.50;	author leonardr;	state Exp;
branches;
next	1.1;

1.1
date	2000.11.12.21.17.57;	author dlr;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	2000.11.12.21.17.57;	author dlr;	state Exp;
branches;
next	1.1.1.2;

1.1.1.2
date	2001.02.21.00.36.30;	author dlr;	state Exp;
branches;
next	;

1.15.2.1
date	2000.12.05.06.34.17;	author jrobbins;	state Exp;
branches;
next	;

1.25.2.1
date	2001.01.30.06.43.51;	author jrobbins;	state Exp;
branches;
next	;

1.25.4.1
date	2001.01.31.17.47.04;	author leonardr;	state Exp;
branches;
next	1.25.4.2;

1.25.4.2
date	2001.02.17.18.28.17;	author leonardr;	state Exp;
branches;
next	;

1.38.6.1
date	2001.06.07.02.25.32;	author edk;	state Exp;
branches;
next	1.38.6.2;

1.38.6.2
date	2001.06.29.17.38.43;	author leonardr;	state Exp;
branches;
next	;


desc
@@


1.55
log
@Added "VersionControl - Admin" permission for project owners.
@
text
@# create a temporary table.

drop table if exists xxxx_populate_RoleActionResource;
create table xxxx_populate_RoleActionResource  (
    ROLE_ID		integer NOT NULL,
    ACTION_ID	        integer NOT NULL,
    RESOURCE_ID	        integer NOT NULL
);

#
# click-through viewer role - domain-wide
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Click-through Viewer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ("Click-through Page - Seen")
;

#
# anonymous guest role - domain-wide
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Anonymous Guest"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Domain Page - View"
                                   , "DomainProjects - View"
                                   , "Domain - Join"
                                   , "Project Content - View"
		                   , "Project Issue Tracking - Query"
                                   , "Project Member - List"
                                   , "Project News - View"
                                   , "Project Page - View"
	                           , "Mailing List - List"
                                   , "Mailing List - View"
				   , "VersionControl - Blame"
				   , "VersionControl - Diff"
				   , "VersionControl - Logs"
				   , "VersionControl - History"
				   , "VersionControl - Update"
				   , "VersionControl - Watch"
				   )
;

#
# registered user role - domain-wide
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Registered User"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Domain Page - View"
                                   , "DomainProjects - View"
                                   , "Project - Suggest" 
   		                   , "Project - View"	
                                   , "Project Content - View"
		                   , "Project Issue Tracking - Query"
                                   , "Project Issue Tracking - Submit"
                                   , "Project Member - List"
                                   , "Project News - View"
                                   , "Project Page - View"
                                   , "Role - Request"
                                   , "Start Page - View"
                                   , "User - Edit - Self"
				   , "User - View - Self"
	                           , "Mailing List - List"
                                   , "Mailing List - View"
				   , "VersionControl - Blame"
				   , "VersionControl - Diff"
				   , "VersionControl - Logs"
				   , "VersionControl - History"
				   , "VersionControl - Update"
				   , "VersionControl - Watch"
				   )
;

#
# content viewer role - project-specific
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Viewer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ("Project Content - View" )
;

#
# observer role - associated w/project.
#

# Observer has all project permissions of registered user.
insert into xxxx_populate_RoleActionResource
	       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole,
               HELM_ROLE_ACTION_RESOURCE as ToCopy,
               HELM_ACTION as Action
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
           and Action.ACTION_ID = ToCopy.ACTION_ID
           and Action.TYPE = "Project"
	   and FromRole.NAME = "Registered User"
	   and ToRole.NAME = "Observer"
;
insert into HELM_ROLE_ACTION_RESOURCE 
	select * from xxxx_populate_RoleActionResource;
delete from xxxx_populate_RoleActionResource;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Observer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( 
	                               "Mailing List - List"
                                     , "Mailing List - View"
                                     , "Project News - Suggest"
				     , "VersionControl - Blame"
				     , "VersionControl - Diff"
				     , "VersionControl - Logs"
				     , "VersionControl - History"
				     , "VersionControl - Update"
				     , "VersionControl - Watch"
				     , "Private Mailing List - View"
				   )
;

#
# developer role - associated w/project
#

# Developer and content developer have all permissions of observer.
insert into xxxx_populate_RoleActionResource
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
               HELM_ROLE_ACTION_RESOURCE as ToCopy
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Observer"
	   and (ToRole.NAME = "Developer" or ToRole.NAME = "Content Developer")
;
insert into HELM_ROLE_ACTION_RESOURCE
	select * from xxxx_populate_RoleActionResource
;
delete from xxxx_populate_RoleActionResource;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( 
                                     "Project Member - List"
                                   , "Project Issue Tracking - Change"
                                   , "VersionControl - Add"
                                   , "VersionControl - Commit"
                                   , "VersionControl - Edit"
                                   , "VersionControl - Import"
                                   , "VersionControl - Release"
                                   , "VersionControl - Remove"
                                   , "VersionControl - Status"
                                   , "VersionControl - Tag"
                                   )
;

#
# content developer role - associated w/project
#

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Project Member - List"
                                   )
;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All web pages")
           and HELM_ACTION.NAME in ( "VersionControl - Add"
                                   , "VersionControl - Commit"
                                   , "VersionControl - Edit"
                                   , "VersionControl - Import"
                                   , "VersionControl - Release"
                                   , "VersionControl - Remove"
                                   , "VersionControl - Status"
                                   , "VersionControl - Tag"
                                   )
;

#
# project owner role - associated w/project
#

# Project owner has all permissions of developer 
insert into xxxx_populate_RoleActionResource
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
               HELM_ROLE_ACTION_RESOURCE as ToCopy
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Developer" 
	   and ToRole.NAME = "Project Owner"
;
insert into HELM_ROLE_ACTION_RESOURCE
	select * from xxxx_populate_RoleActionResource
;
delete from xxxx_populate_RoleActionResource;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Project Owner"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( 
                                     "Mailing List - Add"
                                   , "Mailing List - Delete"
                                   , "Mailing List - Edit"
                                   , "Mailing List - List Members"
                                   , "Mailing List - Subscribe Members"
                                   , "Project - Delete"
                                   , "Project - Edit"
                                   , "Project - Invite"
	                           , "Audit Log - View"
                                   , "Project - Associate With Project"
                                   , "Project - Designate Subproject"
                                   , "Project - Designate Superproject"
	                           , "Project Issue Tracking - Configure"
                                   , "Project News - Approve"
                                   , "Project News - Edit"
                                   , "Project News - Delete"
                                   , "Project Page - Edit"
				   , "Role - Add"
				   , "Role - Delete"
				   , "Role - Edit"
	                           , "Role - Grant"
				   , "Resource - Add"
				   , "Resource - Edit"
                                   , "VersionControl - Admin"
                                   )
;


#
# Domain admin role: controls one domain.
#

# Domain admin has all permissions of registered user.
insert into xxxx_populate_RoleActionResource
	       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole,
               HELM_ROLE_ACTION_RESOURCE as ToCopy
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Registered User"
	   and ToRole.NAME = "Domain Admin"
;

# Domain admin also has all permissions of project owner.
insert into xxxx_populate_RoleActionResource
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
               HELM_ROLE_ACTION_RESOURCE as ToCopy
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Project Owner"
	   and ToRole.NAME = "Domain Admin"
;
insert into HELM_ROLE_ACTION_RESOURCE
	select * from xxxx_populate_RoleActionResource
;
delete from xxxx_populate_RoleActionResource;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, 
               HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Domain Admin"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Category - Add"
	                           , "Domain - Administer"
                                   , "Licenses - Administer"
                                   , "Project - Associate Project"
				   , "ProjectGroup - Add"
				   , "ProjectGroup - Delete"   
				   , "ProjectGroup - Edit"   
				   , "ProjectGroup - List"   
				   , "ProjectGroup - View"
				   , "ProjectGroup Element - Add"
				   , "ProjectGroup Element - Delete"
                                   , "Project - Approve"
	                           , "Project - Lock"
				   , "Project - List"
		                   , "Session - List"
	    	                   , "Unapproved Project Role - Grant"
				   , "UserGroup - Add"
				   , "UserGroup - Delete"   
				   , "UserGroup - Edit"   
				   , "UserGroup - List"   
				   , "UserGroup - View"
				   , "UserGroup Element - Add"
				   , "UserGroup Element - Delete"
                                   , "User - Add"
                                   , "User - Delete"
                                   , "User - Edit"
	                           , "User - List"
                                   , "User - View"
                                   )
;


#
# Host admin role: controls the entire site (potentially, in future,
# consisting of multiple domains).
#

# Host admin has all permissions of domain admin.
insert into xxxx_populate_RoleActionResource
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
               HELM_ROLE_ACTION_RESOURCE as ToCopy
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Domain Admin"
	   and ToRole.NAME = "Host Admin"
;
insert into HELM_ROLE_ACTION_RESOURCE
	select * from xxxx_populate_RoleActionResource
;
delete from xxxx_populate_RoleActionResource;

insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)        
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Host Admin"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Helm - Administer")
;

drop table if exists xxxx_populate_RoleActionResource;
@


1.54
log
@Added TODO item.
@
text
@a209 1
# TODO: Insert "VersionControl - Admin" permission.
d244 1
@


1.53
log
@Added new Version Control permissions and alphabetized existing ones.
@
text
@d210 1
@


1.52
log
@Got rid of reference to nonexistant action.
@
text
@a38 1
				   , "VersionControl - Update"
d43 2
a71 1
				   , "VersionControl - Update"
d76 2
a120 1
				     , "VersionControl - Update"
d125 2
d159 1
d161 1
d188 1
d190 1
@


1.51
log
@Action cleanup. Some role actions, and Audit Log - View, had three actions apiece when one would do. We're now down to 76 actions.
@
text
@a58 1
                                   , "Project - Volunteer"
@


1.50
log
@moved permissions for project documents to nidaba.tigris.org
@
text
@d66 1
a66 1
                                   , "Project Role - Request"
a119 1
				     , "Project Role - Revoke - Self"
d223 1
a223 1
	                           , "Project - Audit Log - View"
d232 4
a235 4
				   , "Project Role - Add"
				   , "Project Role - Delete"
				   , "Project Role - Edit"
	                           , "Project Role - Grant"
a277 5
	                           , "Domain - Audit Log - View"
				   , "Domain Role - Add"
				   , "Domain Role - Delete"
				   , "Domain Role - Edit"
                                   , "Domain Role - Grant"
d332 1
a332 7
           and HELM_ACTION.NAME in ( "Helm - Administer"
	                           , "Host - Audit Log - View"
	                           , "Host Role - Grant"
				   , "Host Role - Add"
				   , "Host Role - Edit"
				   , "Host Role - Delete"
                                   )
@


1.49
log
@More action cleanup, and reinstated Domain - View action because it turns out to have been in use after all.
@
text
@a32 1
                                   , "Project Document - View"
a60 1
                                   , "Project Document - View"
d88 1
a88 2
           and HELM_ACTION.NAME in ("Project Content - View"
                               ,"Project Document - View")
a118 2
	                             , "Private Project Document - View"
                                     , "Project Document - Suggest"
a174 3
	                           , "Project Document - Edit"
	                           , "Project Document - Approve"
	                           , "Project Document - Delete"
a227 3
                                   , "Project Document - Approve"
                                   , "Project Document - Delete"
                                   , "Project Document - Edit"
@


1.48
log
@Getting rid of residual download stuff.
@
text
@d30 1
a30 1
                                   , "Domain News - View"
a31 3
                                   , "DomainProjects - View"
                                   , "DomainProjectCategories - View"
                                   , "DomainSpotlight - View"
a37 1
                                   , "SearchResults - View"
a56 1
                                   , "Domain News - View"
a57 2
                                   , "DomainProjectCategories - View"
                                   , "DomainSpotlight - View"
a68 2
                                   , "Project Screenshot - Suggest"
                                   , "SearchResults - View"
a130 1
				     , "Proprietary Content - Access"
d159 1
a159 2
                                     "Project Branding - View"
                                   , "Project Member - List"
d179 1
a179 2
           and HELM_ACTION.NAME in ( "Project Branding - View"
                                   , "Project Member - List"
a235 1
                                   , "Project Branding - Edit"	
a247 1
                                   , "Project Screenshot - Approve"
a289 2
	                           , "Domain - Delete"
                                   , "Domain - Edit"
d291 4
a294 6
                                   , "Domain - View"
                                   , "Domain Branding - Edit"
                                   , "Domain Page - Edit"
	                           , "Domain Role - Grant"
                                   , "DomainProjectCategories - Edit"
                                   , "DomainSpotlight - Edit"
d307 1
a308 4
				   , "Domain Role - Add"
				   , "Domain Role - Edit"
				   , "Domain Role - Delete"
		                   , "Session - List"
a320 2
                                   , "Domain News - Edit"
                                   , "Domain Role - Grant"
d349 1
a349 3
           and HELM_ACTION.NAME in ( "Domain - Add"
                                   , "Domain - List"
				   , "Helm - Administer"
@


1.47
log
@Project roles should not have domain actions; this was causing confusion and bloating the RAR table.
@
text
@a35 1
                                   , "Project Download - View"
a68 1
                                   , "Project Download - View"
a99 1
	                           ,"Project Download - View"
a132 1
                                     , "Project Download - Suggest"
a251 3
                                   , "Project Download - Approve"
                                   , "Project Download - Delete"
                                   , "Project Download - Edit"
@


1.46
log
@Licenses are now contained in a database-managed table rather than in a custom Java class (yay!)
@
text
@d110 1
a110 1
# Observer has all permissions of registered user. (?)
d113 3
a115 2
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
               HELM_ROLE_ACTION_RESOURCE as ToCopy
d117 2
a270 2
                                   , "Domain News - View"
                                   , "Domain News - Edit"
d279 11
a289 1
# Domain admin has all permissions of project owner.
@


1.45
log
@Implemented project-scoped roles.
@
text
@d309 1
@


1.44
log
@Give project document manipulation permissions to Content Developer role.
@
text
@d261 3
d266 2
a320 5
				   , "Resource - Add"
				   , "Resource - Edit"
				   , "Project Role - Add"
				   , "Project Role - Edit"
				   , "Project Role - Delete"
@


1.43
log
@Implemented basic project group and category nesting.
@
text
@d193 3
@


1.42
log
@Added support for private project documents.
@
text
@d243 4
a246 1
                                   , "Project Branding - Edit"
d267 1
a267 1
# domain admin role - global domain
d290 2
a291 1
           and HELM_ACTION.NAME in ( "Domain - Administer"
d301 1
d341 2
a342 1
# host admin role
@


1.41
log
@Well, not quite so generously.
@
text
@d131 1
@


1.40
log
@Dispense issue tracking permissions more generously.
@
text
@a73 1
                                   , "Project Issue Tracking - Change"
d171 1
@


1.39
log
@Added permission supporting CVS annotate.  Chose "Blame" as the action
part of the name in honor of Subversion's new name for CVS's annotate
command.
@
text
@d73 2
a131 1
		                     , "Project Issue Tracking - Submit"
a170 1
	                           , "Project Issue Tracking - Change"
@


1.38
log
@BroadcastMessage now requires Domain - Administrate, and there are now roles that actually have that permission.
@
text
@d46 1
d85 1
d136 1
@


1.38.6.1
log
@add perms required for private downloads and documents
Reviewed by:   Dan Rall <dlr@@collab.net>
@
text
@a138 2
				     , "Private Project Download - View"
				     , "Private Project Document - View"
@


1.38.6.2
log
@Give project document manipulation permissions to Content Developer role.
@
text
@a190 3
	                           , "Project Document - Edit"
	                           , "Project Document - Approve"
	                           , "Project Document - Delete"
@


1.37
log
@Implemented access control based on ALLOW_JOIN.
@
text
@d278 2
a279 1
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
d283 2
a284 1
           and HELM_ACTION.NAME in ( "Domain - Delete"
@


1.36
log
@Guest and registered user should not have Issuezilla accounts.
@
text
@d31 1
@


1.35
log
@More renaming madness as the act of 'project disabling' becomes 'project locking'
@
text
@a37 1
		                   , "Project Issue Tracking - Submit"
a70 1
		                   , "Project Issue Tracking - Submit"
@


1.34
log
@a new permission for viewing private mailing lists
@
text
@d300 1
a300 1
	                           , "Project - Disable"
@


1.33
log
@Domain admin and up has new action Session - List
@
text
@d139 1
@


1.32
log
@Political correctness strikes Tigris.org! The components of project and user groups no longer wish to be called "members", as that causes them to be confused with users who have roles in projects. The new, approved term is "elements".
@
text
@d310 1
@


1.31
log
@Gave Project - Disable to host and domain admin.
@
text
@a64 1
                                   , "UserGroup Member - View - Self"
d296 2
a297 2
				   , "ProjectGroup Member - Add"
				   , "ProjectGroup Member - Delete"
d315 2
a316 2
				   , "UserGroup Member - Add"
				   , "UserGroup Member - Delete"
@


1.30
log
@Project owners should be able to edit downloads in their project
(added for Elicia).
@
text
@d300 1
@


1.29
log
@Grant "Project News - Delete" to the "Project Owner" role.
@
text
@d246 1
@


1.28
log
@The anonymous user should not have the "Project - View" permission.
@
text
@d249 1
@


1.27
log
@This is the highest revision from the HELM_PEER_PORT_BRANCH.  The previous import caused too many conflicts to resolve manually
@
text
@a34 1
                                   , "Project - View"
@


1.26
log
@allowed register user to submit issues
@
text
@d14 3
a16 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Click-through Viewer"
d25 3
a27 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Anonymous Guest"
d57 3
a59 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Registered User"
d97 3
a99 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Content Viewer"
d112 2
a113 2
	       select  ToRole.roleID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  Role as FromRole, Role as ToRole, 
d115 3
a117 3
         where ToCopy.ROLE_ID = FromRole.roleID
	   and FromRole.name = "Registered User"
	   and ToRole.name = "Observer"
d124 3
a126 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Observer"
d150 2
a151 2
       select  ToRole.roleID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  Role as FromRole, Role as ToRole, 
d153 3
a155 3
         where ToCopy.ROLE_ID = FromRole.roleID
	   and FromRole.name = "Observer"
	   and (ToRole.name = "Developer" or ToRole.name = "Content Developer")
d163 3
a165 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Developer"
d185 3
a187 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Content Developer"
d195 3
a197 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Content Developer"
d214 2
a215 2
       select  ToRole.roleID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  Role as FromRole, Role as ToRole, 
d217 3
a219 3
         where ToCopy.ROLE_ID = FromRole.roleID
	   and FromRole.name = "Developer" 
	   and ToRole.name = "Project Owner"
d227 3
a229 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Project Owner"
d265 2
a266 2
       select  ToRole.roleID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  Role as FromRole, Role as ToRole, 
d268 3
a270 3
         where ToCopy.ROLE_ID = FromRole.roleID
	   and FromRole.name = "Project Owner"
	   and ToRole.name = "Domain Admin"
d278 3
a280 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Domain Admin"
d333 2
a334 2
       select  ToRole.roleID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  Role as FromRole, Role as ToRole, 
d336 3
a338 3
         where ToCopy.ROLE_ID = FromRole.roleID
	   and FromRole.name = "Domain Admin"
	   and ToRole.name = "Host Admin"
d346 3
a348 3
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Host Admin"
@


1.25
log
@added role for guest login
@
text
@d74 1
@


1.25.4.1
log
@correctly capitalized autoIncrement
@
text
@d14 3
a16 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Click-through Viewer"
d25 3
a27 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Anonymous Guest"
d57 3
a59 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Registered User"
d96 3
a98 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Viewer"
d111 2
a112 2
	       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d114 3
a116 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Registered User"
	   and ToRole.NAME = "Observer"
d123 3
a125 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Observer"
d149 2
a150 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d152 3
a154 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Observer"
	   and (ToRole.NAME = "Developer" or ToRole.NAME = "Content Developer")
d162 3
a164 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Developer"
d184 3
a186 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
d194 3
a196 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
d213 2
a214 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d216 3
a218 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Developer" 
	   and ToRole.NAME = "Project Owner"
d226 3
a228 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Project Owner"
d264 2
a265 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d267 3
a269 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Project Owner"
	   and ToRole.NAME = "Domain Admin"
d277 3
a279 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Domain Admin"
d332 2
a333 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d335 3
a337 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Domain Admin"
	   and ToRole.NAME = "Host Admin"
d345 3
a347 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Host Admin"
@


1.25.4.2
log
@Merging in changed from head. I'm dubious as to whether Registered User should have Project Issue Tracking - Submit, since that means every user on the site has an IZ account in every public project, but we can sort it out later.
@
text
@a73 1
		                   , "Project Issue Tracking - Submit"
@


1.25.2.1
log
@moved changes from HEAD
@
text
@a73 1
		                   , "Project Issue Tracking - Submit"
@


1.24
log
@Added VersionControl - Status action.
@
text
@d22 32
@


1.23
log
@added resources for Project Documents: HELM_PROJECTSECTION table, and join table HELM_PROJECT_DOCUMENT_SECTION
@
text
@d142 1
d170 1
@


1.22
log
@added Project News - Suggest and Project News - Approve
@
text
@d40 1
d69 2
a70 1
	                           ,"Project Download - View")
d208 2
@


1.21
log
@Create audit log table on install.
@
text
@d99 1
a153 2
                                   , "Project News - Add"
                                   , "Project News - Edit"
d209 1
a209 1
                                   , "Project News - Add"
@


1.20
log
@Support for general admin servlets.
@
text
@d204 1
d246 1
d315 1
@


1.19
log
@First stab at dynamic role creation.
@
text
@d312 1
@


1.18
log
@New actions for resource manipulation.
@
text
@d263 6
d313 3
@


1.17
log
@Added support for resigning your own roles.
@
text
@d261 2
@


1.16
log
@Moved suggestion permissions up into Observer.
@
text
@d99 1
@


1.15
log
@Backed out previous change since the issue was resolved.
@
text
@a38 2
                                   , "Project Document - Suggest"
                                   , "Project Download - Suggest"
d97 2
@


1.15.2.1
log
@merged in changes from HEAD
@
text
@d39 2
a98 2
                                     , "Project Document - Suggest"
                                     , "Project Download - Suggest"
@


1.14
log
@Revoke issue tracking query permission for registered user until some Issuezilla problems are resolved.
@
text
@d42 1
a42 1
#		                   , "Project Issue Tracking - Query"
@


1.13
log
@Added another level of Issuezilla permissions
@
text
@d42 1
a42 1
		                   , "Project Issue Tracking - Query"
@


1.12
log
@Give Project Download - View permission to Content Viewer role.
@
text
@d132 1
@


1.11
log
@* remove potential developer role so that people can't make role requests
  for private projects unless they have invitations.
* added a timestamp field and an index to INVITATION
@
text
@d69 2
a70 1
           and HELM_ACTION.NAME in ("Project Content - View")
@


1.10
log
@Give registered users the project member list permission in public projects.
@
text
@a72 12
# potential developer role - associated w/project (more likely a group of
# them)
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  Role.roleID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  Role, HELM_ACTION, HELM_RESOURCE
         where Role.name = "Potential Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ("Project Role - Request")
;

#
@


1.9
log
@Changed permissions for groups.
@
text
@d43 1
@


1.8
log
@Added requestable field to Role. Created a new role with role request permission, and granted it to everybody across all projects (even proprietary ones)
@
text
@d34 1
a34 1
                                   , "Group Member - View - Self"
d259 7
a265 5
                                   , "Group - Add"
                                   , "Group - Delete"
                                   , "Group - Edit"
                                   , "Group Member - Add"
                                   , "Group Member - Edit"
d269 7
@


1.7
log
@Give everyone Content Viewer role in the www project so they can view domain web pages.
@
text
@d72 12
@


1.6
log
@Corrected misspelling of click-through action
@
text
@d11 1
a11 1
# registered user role - domain-wide
d58 11
@


1.5
log
@Added hack to support viewing click-through pages when lacking a role.
@
text
@d18 1
a18 1
           and HELM_ACTION.NAME in ("Click Through Page - Seen")
@


1.4
log
@Permission checking bugfixes; one more big one on the way.
@
text
@d16 11
@


1.3
log
@Added Project Role - Request action
@
text
@d25 1
a73 1
			             , "Project - View"
@


1.2
log
@Removed Code Developer role, rearranged other roles.
@
text
@d33 1
@


1.1
log
@Initial revision
@
text
@d72 1
a72 1
	                             , "Project - Invite"
d86 1
a86 1
# Developer has all permissions of observer.
d93 1
a93 1
	   and ToRole.name = "Developer"
a107 1
			           , "Project - View"
d116 4
d124 2
a125 4
           and HELM_RESOURCE.DESCRIPTION in ("All web pages")
           and HELM_ACTION.NAME in ( 
                                     "Project Branding - View"
                                   , "Project Member - List"
d128 1
a128 6
			           , "Project - View"
                                   , "VersionControl - Add"
                                   , "VersionControl - Commit"
                                   , "VersionControl - Import"
                                   , "VersionControl - Remove"
                                   , "VersionControl - Tag"
d135 3
a137 7
         where Role.name = "Code Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All c sources")
           and HELM_ACTION.NAME in ( 
                                     "Project Branding - View"
                                   , "Project Member - List"
			           , "Project - View"
                                   , "VersionControl - Add"
d149 1
a149 1
# Project owner has all permissions of developer.
d155 1
a155 1
	   and FromRole.name = "Developer"
d176 1
@


1.1.1.1
log
@Merging newhelm tree into helm, as per IZ issue #557.  Previous major version of helm is tagged TIGRIS_NOV_11_2000.
@
text
@@


1.1.1.2
log
@Replacing the HEAD with the HELM_PEER_PORT_BRANCH.
@
text
@a10 43
# click-through viewer role - domain-wide
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Click-through Viewer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ("Click-through Page - Seen")
;

#
# anonymous guest role - domain-wide
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Anonymous Guest"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Domain Page - View"
                                   , "Domain News - View"
                                   , "DomainProjects - View"
                                   , "DomainProjectCategories - View"
                                   , "DomainSpotlight - View"
                                   , "Project Content - View"
                                   , "Project - View"
                                   , "Project Download - View"
                                   , "Project Document - View"
		                   , "Project Issue Tracking - Query"
		                   , "Project Issue Tracking - Submit"
                                   , "Project Member - List"
                                   , "Project News - View"
                                   , "Project Page - View"
                                   , "SearchResults - View"
	                           , "Mailing List - List"
                                   , "Mailing List - View"
				   , "VersionControl - Update"
				   , "VersionControl - Diff"
				   , "VersionControl - Logs"
				   , "VersionControl - History"
				   )
;

#
d14 3
a16 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Registered User"
d23 1
a23 1
                                   , "UserGroup Member - View - Self"
a24 1
   		                   , "Project - View"	
d27 2
a29 1
                                   , "Project Document - View"
a30 2
		                   , "Project Issue Tracking - Submit"
                                   , "Project Member - List"
a32 1
                                   , "Project Role - Request"
a47 13
# content viewer role - project-specific
#
insert into HELM_ROLE_ACTION_RESOURCE (ROLE_ID, ACTION_ID, RESOURCE_ID)
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Viewer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ("Project Content - View"
	                           ,"Project Download - View"
                               ,"Project Document - View")
;

#
d53 2
a54 2
	       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d56 3
a58 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Registered User"
	   and ToRole.NAME = "Observer"
d65 3
a67 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Observer"
d72 1
a73 4
                                     , "Project Document - Suggest"
                                     , "Project Download - Suggest"
                                     , "Project News - Suggest"
				     , "Project Role - Revoke - Self"
d86 1
a86 1
# Developer and content developer have all permissions of observer.
d88 2
a89 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d91 3
a93 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Observer"
	   and (ToRole.NAME = "Developer" or ToRole.NAME = "Content Developer")
d101 3
a103 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Developer"
a106 1
	                           , "Project Issue Tracking - Change"
d108 1
a112 1
                                   , "VersionControl - Status"
a116 4
#
# content developer role - associated w/project
#

d118 6
a123 5
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All applicable resources")
           and HELM_ACTION.NAME in ( "Project Branding - View"
d125 8
d137 9
a145 5
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Content Developer"
           and HELM_RESOURCE.DESCRIPTION in ("All web pages")
           and HELM_ACTION.NAME in ( "VersionControl - Add"
a148 1
                                   , "VersionControl - Status"
d157 1
a157 1
# Project owner has all permissions of developer 
d159 2
a160 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d162 3
a164 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Developer" 
	   and ToRole.NAME = "Project Owner"
d172 3
a174 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Project Owner"
a183 2
                                   , "Project - Invite"
	                           , "Project - Audit Log - View"
a185 2
                                   , "Project Document - Delete"
                                   , "Project Document - Edit"
d189 1
a189 1
                                   , "Project News - Approve"
d206 2
a207 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d209 3
a211 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Project Owner"
	   and ToRole.NAME = "Domain Admin"
d219 3
a221 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Domain Admin"
a224 1
	                           , "Domain - Audit Log - View"
d231 5
a235 7
				   , "ProjectGroup - Add"
				   , "ProjectGroup - Delete"   
				   , "ProjectGroup - Edit"   
				   , "ProjectGroup - List"   
				   , "ProjectGroup - View"
				   , "ProjectGroup Member - Add"
				   , "ProjectGroup Member - Delete"
a238 15
				   , "Resource - Add"
				   , "Resource - Edit"
				   , "Project Role - Add"
				   , "Project Role - Edit"
				   , "Project Role - Delete"
				   , "Domain Role - Add"
				   , "Domain Role - Edit"
				   , "Domain Role - Delete"
				   , "UserGroup - Add"
				   , "UserGroup - Delete"   
				   , "UserGroup - Edit"   
				   , "UserGroup - List"   
				   , "UserGroup - View"
				   , "UserGroup Member - Add"
				   , "UserGroup Member - Delete"
d256 2
a257 2
       select  ToRole.ROLE_ID, ToCopy.ACTION_ID, ToCopy.RESOURCE_ID
         from  HELM_ROLE as FromRole, HELM_ROLE as ToRole, 
d259 3
a261 3
         where ToCopy.ROLE_ID = FromRole.ROLE_ID
	   and FromRole.NAME = "Domain Admin"
	   and ToRole.NAME = "Host Admin"
d269 3
a271 3
       select  HELM_ROLE.ROLE_ID, HELM_ACTION.ACTION_ID, HELM_RESOURCE.RESOURCE_ID
         from  HELM_ROLE, HELM_ACTION, HELM_RESOURCE
         where HELM_ROLE.NAME = "Host Admin"
a274 2
				   , "Helm - Administer"
	                           , "Host - Audit Log - View"
a275 3
				   , "Host Role - Add"
				   , "Host Role - Edit"
				   , "Host Role - Delete"
@

