Use ACLs in Opencast

[tgloeggl]

The ACLs in Opencast should reflect the permissions in Stud.IP

• to give other systems (like Tobira) the chance to list the correct accessible videos for a user
• to reduce the number of roles a user has assigned - to many roles pose problems for Opencast

The targeted feature set is as follows:

• ACLs:

  • Videos:
    • {courseid}_Instructor => read, write
    • {courseid}_Learner => read
    • ROLE_ADMIN => read, write [_Note: do we need this? ROLEADMIN can always do anything]
    • ROLE_ANONYMOUS => read (set if necessary)
    • STUDIPUSER => read oder read, write
  • Playlists
    • {courseid}_Instructor => read, write
    • {courseid}_Learner => read
    • (STUDIPUSER => read oder read, write) -> As soon as they are back on the workplace)

• UserRoles.php:

  • Course videos: When determining the videos in courses, the {courseid}_* roles are returned and not the individual video rights
  • Workplace videos: Videos that are not in a course, aka where users have "direct rights" to them, receive the ACL:
    • STUDIPUSER{user_id} => read oder read, write

The changes assume the following PR will be merged to Opencast: https://github.com/opencast/opencast/pull/5172