dotLRN Permissioning
====================

This document describes the issues surrounding general permissioning
in dotLRN. It defines the roles and access rules for the entire
system.

Roles
-----

- Unregistered Visitor
- Registered Visitor
- Registered Student of a Class
- TA of a class
- Administrator of a class
- Instructor of a class
- Member of a graduating year

- Member of a community
- Administrator of a community


Sections of the Site
--------------------

- Main Site

All users can view the page

- Per-Class Main Page

All users can see the description of the class in general. Users who
are registered for a particular instance of that class see links to
those term offerings.

- Per-Class Admin Page

The sitewide admins can access this section which allows:
    - creation of new instances of this class
    - assignment of profs and tas to each instance of a class
    - editing the main blurb about each class

- Per-Class-Instance Main Page

Users not registered for this instance of this class see only an
informational page about the class, including the public files like
the syllabus.

Users registered for this instance of this class see their full portal data.

- Per-Class-Instance Admin Page

Profs, TAs, and admins for this class instance can see the admin section
for a class. This admin section allows management of class membership.

- Per-Class-Instance-Package Main Page

Users registered for this instance of this class can see this page,
and that's it. No one else can access this.

- Per-Class-Instance-Package Admin Page

Class-Instance TAs and profs can access this.

- Per-Community Main Page

Community Members will see the full membership page, much like a class
page. Non community members will just see a general community
description page.

- Per-Community Admin Page

Community Admins will be able to determine community membership.

- Per-User Main Page

Each user will have access to her main page, which will link all basic
packages.