Integrate an extended permissions framework with CLAW to support collaborative applications

[ddavis]

Out of the box Drupal supports a roles-based permissions framework that is well integrated with other Drupal modules. This has proven inadequate for highly collaborative applications leading to the development of extended Drupal permissions modules such as Organic Groups and Groups. To support such applications CLAW needs an integration of an off-the-shelf extended Drupal permissions module that works seamlessly with the Islandora/CLAW stack. In particular, support for role by "user/group" is needed to simplify building responsive applications (and modules) on top of Islandora/CLAW, where finer-grained permissions are needed. This augments but does not supplant other authorization methods but supports cases where a-priori business logic is needed for UI operations.

Additional rationale may be found at: https://confluence.si.edu/display/SIDDEV/Basic+Permissions+Framework+Feature

[dannylamb]

Hey @ddavis,

Circling back to this one. The current game plan is to rely as much as possible on Drupal for permissions and authorization, and so a third-party module like Organic Groups should work to suit your needs. I'll be mindful of this use case when tackling issues related to authorization, to make sure such integrations are possible for you and SI.

[ajs6f]

@ddavis I think the high road here is for us to build on the work we've already done at @Smithsonian with Organic Groups and bring that forward to Drupal 8 and CLAW and contribute it. Then we win, and CLAW wins (by having a nice alternative for those who have the kinds of needs we have).