Also, as well as permissions for what you can *do* - can group permissions resolve what you can *read* ? For example, Say I want to build a Knowledge Base, with a moderation workflow, via Forum posts (which I do). I know it will be trivial to control who can post there, but I want those posts to have a status of e.g. "Unreviewed", "Internal", "Verified", "Public", "Partner", etc, and to use a user's group permission to control whether they can see that post.
I know I'd probably have to write a custom search for it - but that doesn't worry me.
|