Page History

...

Following the layout scheme above, the precise CSS file structure for the current teams and mangers might look something like this:

Proposed Implementation

Wiki Markup\[9/19/2006\]: There were suggestions about the admin structure made by Oliver and others at the 9/19/2006 offsite that have led to updates in the Admin permissions column of the table below.    They are summarized here:

• an administrator at the ./managers level can grant admin bits on otherwise-locked down folders at the levels below.  Bad.  So, the owners of the ./managers level will not have the administrative bit turned on.  The account of the director of CSS will have admin bits, so they can act to fix anything that might go wrong.
• groups of individual kerberos ids as in the original example should be replaced with an acl that contains those names.  To wit, "othomas, goguen, jfw" would be assigned a list like "css-managers-help-admin"; then when membership changes, it's just the acl that is changed in one place, and its effects ripple throughout the system without further intervention.
• similarly, we replace the principal of the director and the fbc with a list named for the role, populated by the principal of the incumbent.  To wit, css-director now holds 'jfw' but soon won't. 

...