Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Roles and Group RolesRoles and Group Roles
Previous
 
Next
New Post
12/12/2008 5:17 PM
 

I'm a newbie to DotNetNuke so apology in advance if was posted elsewhere.

Is there a way to have a group role belong to another group role?  For example:  I want my Communications Leadership (group role) be in the Communications Group (Group role).  This way, if a user was assigned Communications Leadership (role), they would be added to both group roles.  Right now I would have to add the user to both Communications Leadership (role) -and- Communications Group (role).

Another example, is have a Leadership (group role) that would include Communications Leadership (group role) and Technology Leadership (group role).

Thx -Tamara (Atlanta)

 
New Post
12/13/2008 12:20 AM
 

No, this is not currently possible in DNN. 

Role Groups are only a way to organize roles.  Security cannot be aplied directly by Role group.


DotNetNuke Modules from Snapsis.com
 
New Post
12/14/2008 2:42 AM
 

 
Hi, Tamara-

You can sort of do what you're describing as long as you never have more than two levels of roles.  It's not as nice as being able to assign Role Groups to other Role Groups, but you may find the approach helpful.  If you need to set up more than just a few roles, the following info should be helpful...

Managing lots of user roles in DNN
The trick is to think of individual "Security Roles" as "child groups" (groups of users in those roles).  Your child groups (security roles) must add a prefix to the role name to reflect the child's parent role group.  Really this is no different than how anyone would normally use role groups except that you're adding a prefix to each security role to reflect it's parent role group instead of just relying on the DNN "role groups" feature to define which roles belong to which groups.  Here's an example to illustrate what I'm talking about and why the prefix is important:

Using your Communications Group example, it would work like this:

   Parent group ->  "Communications Group" = a role group named "Communications"

   Child group ->  "Communications Leadership" = a security role named "COMM-Leadership"

Now, to make it work, you assign all security roles beginning with "COMM-" to the "Communications" role group.  With that set up, when someone gets the "COMM-Leadership" secuirty role added to their user account, that user is automatically added to the "Communications" role groupNow, as John said, the "Communications" role group has no security permissions attached to it -- role groups are simply a way to help organize security roles.  You'll still have to configure all appropriate permissions for each security role (i.e., there's no role inheritance of permissions from other groups/roles).  See the link at the bottom of this response for a few other reasons why the current "Role Groups" implementation is not very useful.

Why use a prefix in the Secuirty Role name?
The need for the "COMM-" prefix becomes apparent when you're ready to set up roles for another role group.  For instance, if you created a similar Leadership group for the "Sales" organization, you'd set things up the same way:

   Parent group ->  "Sales Group" = a role group named "Sales"

   Child group ->  "Sales Leadership" = a security role named "SALES-Leadership"

Using a prefix on the role name ("SALES-" and "COMM-") insures sure you end up with separate "Leadership" roles for the separate groups but are able to use the same name ("Leadership") for the same type of role. 
 

A Better Example
Here's a recent thread about roles and groups in general terms and with a better, more generic example to the one I gave here.  It also cites some additional limitations of role groups:

DNN Role Groups and Roles (which one should I use)?
http://www.dotnetnuke.com/Community/Forums/tabid/795/forumid/108/threadid/270383/scope/posts/Default.aspx

 
-mamlin


esmamlin atxgeek.me
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Roles and Group RolesRoles and Group Roles


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out