{"action":"created","issue":{"url":"https://api.github.com/repos/punkave/apostrophe/issues/166","labels_url":"https://api.github.com/repos/punkave/apostrophe/issues/166/labels{/name}","comments_url":"https://api.github.com/repos/punkave/apostrophe/issues/166/comments","events_url":"https://api.github.com/repos/punkave/apostrophe/issues/166/events","html_url":"https://github.com/punkave/apostrophe/issues/166","id":44310762,"number":166,"title":"Apostrophe permissions and their extensibility","user":{"login":"fotisp","id":210779,"avatar_url":"https://avatars.githubusercontent.com/u/210779?v=3","gravatar_id":"","url":"https://api.github.com/users/fotisp","html_url":"https://github.com/fotisp","followers_url":"https://api.github.com/users/fotisp/followers","following_url":"https://api.github.com/users/fotisp/following{/other_user}","gists_url":"https://api.github.com/users/fotisp/gists{/gist_id}","starred_url":"https://api.github.com/users/fotisp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fotisp/subscriptions","organizations_url":"https://api.github.com/users/fotisp/orgs","repos_url":"https://api.github.com/users/fotisp/repos","events_url":"https://api.github.com/users/fotisp/events{/privacy}","received_events_url":"https://api.github.com/users/fotisp/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/punkave/apostrophe/labels/documentation","name":"documentation","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2014-09-29T16:03:53Z","updated_at":"2015-02-21T04:12:05Z","closed_at":null,"body":"I would like to ask where / how I should look at in order to really understand the permissions layer in apostrophe. Moreover I am looking to extend the User / Groups Manager in order to allow a bit more customized control of several aspects of the CMS.\r\n\r\nFor example I have a custom module with does everything as it should but I need to plug in Groups and Users permission in there. For instance, right now there are the following types of users “admin”, “editor” and “guest”, how would I go about adding an “editor” type, say “manager” who cannot do a particular action.\r\n\r\nI have seen permissions.can(“”) , but how can I add strings to that “can” action which are customized to the current deployment. Can I do it at the module level? Or is this project wide?\r\n\r\nAlso after my hiccup with the apos[Module]Menu macro where I just needed to add the “permission” object, rather than pemission.admin, I need to understand where these checks are occurring. Because I might need to override the entire menu, and cherry peek what is available to whom.\r\n\r\nI am comfortable enough now to hack at the right places, but I need some insight on the permission part of A2.\r\n\r\n\r\nBest,\r\nFotis"},"comment":{"url":"https://api.github.com/repos/punkave/apostrophe/issues/comments/75354830","html_url":"https://github.com/punkave/apostrophe/issues/166#issuecomment-75354830","issue_url":"https://api.github.com/repos/punkave/apostrophe/issues/166","id":75354830,"user":{"login":"benirose","id":2953531,"avatar_url":"https://avatars.githubusercontent.com/u/2953531?v=3","gravatar_id":"","url":"https://api.github.com/users/benirose","html_url":"https://github.com/benirose","followers_url":"https://api.github.com/users/benirose/followers","following_url":"https://api.github.com/users/benirose/following{/other_user}","gists_url":"https://api.github.com/users/benirose/gists{/gist_id}","starred_url":"https://api.github.com/users/benirose/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benirose/subscriptions","organizations_url":"https://api.github.com/users/benirose/orgs","repos_url":"https://api.github.com/users/benirose/repos","events_url":"https://api.github.com/users/benirose/events{/privacy}","received_events_url":"https://api.github.com/users/benirose/received_events","type":"User","site_admin":false},"created_at":"2015-02-21T04:12:05Z","updated_at":"2015-02-21T04:12:05Z","body":"Hi @fotisp. You might be able to find what you're looking for either in the [apostrophe-people readme](https://github.com/punkave/apostrophe-people), or by reading through the code in `apostrophe/lib/modules/permissions.js`. I'm not sure we have it well documented at the moment or if we support that. However, we are currently in the process of refactoring our auth services in the unstable branch, so we'll take that into consideration. You can read more about our refactoring on our [google group](https://groups.google.com/forum/#!topic/apostrophenow/RZoxUE6yLb4)"}}