--
--  Copyright (C) 2001, 2002 OpenForce, Inc.
--
--  This file is part of dotLRN.
--
--  dotLRN is free software; you can redistribute it and/or modify it under the
--  terms of the GNU General Public License as published by the Free Software
--  Foundation; either version 2 of the License, or (at your option) any later
--  version.
--
--  dotLRN is distributed in the hope that it will be useful, but WITHOUT ANY
--  WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
--  FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
--  details.
--


--
-- dotLRN Project
--
-- copyright 2001, OpenForce
-- released under the GPL, v2.0
--
-- ben@openforce
--
-- 11/28/2001
--
-- Security Setup for dotLRN
-- privileges, privilege inheritance
--

DECLARE
BEGIN
	-- the ability to browse dotLRN in general
	acs_privilege.create_privilege('dotlrn_browse');

	-- the ability to even view that a community exists
	acs_privilege.create_privilege('dotlrn_view_community');

	-- the ability to participate in a community
	acs_privilege.create_privilege('dotlrn_edit_community');

	-- the ability to admin a community
	acs_privilege.create_privilege('dotlrn_admin_community');

	-- the ability to create a community
	acs_privilege.create_privilege('dotlrn_create_community');

	-- the ability to even view a community type
	acs_privilege.create_privilege('dotlrn_view_community_type');

	-- the ability to admin a community type
	acs_privilege.create_privilege('dotlrn_admin_community_type');
	
	-- the ability to create a community type
	acs_privilege.create_privilege('dotlrn_create_community_type');

	-- Consistent permissions
	acs_privilege.add_child('dotlrn_edit_community', 'dotlrn_view_community');
	acs_privilege.add_child('dotlrn_admin_community', 'dotlrn_edit_community');

	-- inheritance
	acs_privilege.add_child('create', 'dotlrn_create_community_type');
	acs_privilege.add_child('create', 'dotlrn_create_community');
	acs_privilege.add_child('write', 'dotlrn_edit_community');
	acs_privilege.add_child('read', 'dotlrn_view_community');
	acs_privilege.add_child('read', 'dotlrn_view_community_type');
	acs_privilege.add_child('admin', 'dotlrn_admin_community');
	acs_privilege.add_child('admin', 'dotlrn_admin_community_type');

	-- for now, we only want admins to be able to browse by default
	acs_privilege.add_child('admin', 'dotlrn_browse');

	-- no default permissions

end;
/
show errors