Create user group whose files / objects default to "private" visibility

[hackartisan]

Only admins can publish

[hackartisan]

Some code to consult:

• https://github.com/projecthydra/hydra-head/blob/master/hydra-access-controls/lib/hydra/ability.rb
• https://github.com/projecthydra/sufia/blob/master/sufia-models/app/models/concerns/sufia/ability.rb

[hackartisan]

for reference https://github.com/osulp/Scholars-Archive/blob/master/app/models/ability.rb#L6-L11

[hackartisan]

notes from conversation i just had with nrogers about role maps:

• https://github.com/ClevelandArtGIT/cma-archives/blob/master/config/role_map.yml.example
• 'However you can define custom groups and then do stuff like "if user_groups.include? 'chemists' can [:create], Compound"'

[hackartisan]

more irc conversation: 15:10 HackmasterA: anyone have a rake task lying around that creates an initial admin user? 15:14 dmc186 has left IRC (Ping timeout: 248 seconds) 15:15 dmc186 has joined (~Adium@71.58.78.107) 15:26 ruebot has left IRC (Quit: Please, sir, I want some more.) 15:26 atz: HackmasterA: you mean at the system level? 15:26 atz: or DB? 15:26 HackmasterA: atz: DB (app level) 15:31 atz: HackmasterA: isn't that implied in a normal db:migrate? 15:32 HackmasterA: atz: is it? I will look 15:32 mejackreed has left IRC (Quit: Leaving.) 15:33 nrogers_art: HackmasterA: Are you using the defacto role map or did you switch it out for something else? 15:34 HackmasterA: nrogers_art: I had set up an admin role using Ability but I didn't do anything with it and may have caused problems so I'm temporarily rolling back to nothing. 15:34 HackmasterA: i've never touched the role map. 15:35 nrogers_art: I just set up a new group in the role map and then changed ability without too many issues 15:35 HackmasterA: nrogers_art: you have to do both? maybe that's what's causing my problem. 15:36 jpstroop has left () 15:36 nrogers_art: I don't actually have an example of the Role Map in version control but I just added an admin: group

and via /msg:

• https://github.com/ClevelandArtGIT/cma-archives/blob/master/app/models/ability.rb#L9-14 nrogers_art
• https://github.com/ClevelandArtGIT/cma-archives/blob/master/app/models/user.rb#L20-25 nrogers_art
• If you don't do that last thing it only looks in the DB for some reason. Since I chose to ignore the DB completely this worked for me

[hackartisan]

Role mapper is the default way to do this in sufia, but you have to keep a config file of your users. https://github.com/projecthydra/hydra-role-management is the way I started doing it before, and I like that technique better.