FW: user administration on dita.xml.org

["Carol Geyer" <carol.geyer@oasis-open.org>]

-----Original Message-----
From: Bruce Esrig [mailto:esrig@alumni.princeton.edu] 
Sent: Thursday, March 08, 2007 5:32 AM
To: Carol Geyer
Cc: dita-fa-edboard@lists.xml.org; bruce.esrig@gmail.com
Subject: user administration on dita.xml.org

Hi Carol (et al),

To prevent new spurious blog entries, I created a new role "contributing 
user". It has all the permissions that "authenticated user" used to have, 
but not all users are "contributing users". It has to be granted to users 
one by one.

I took away permission for posting to a blog from "authenticated user". (To 
undo, just give that permission back to "authenticated user".) At present, 
an authenticated user has to get enabled as a "contributing user" in order 
to start (or at least post to) a new blog. I used "View blogs by name" to 
find and enable all existing blog owners as "contributing user"s.

Action item for the editorial board: should we (a) figure out how to tell 
users that they have to apply in order to get a blog, (b) re-enable 
authenticated users to initiate blogs, (c) other?

I blocked the following users and deleted their comments. The posts I made 
"unpublished" ... we probably would want to delete them too. I didn't send 
any notices.
   oo (1 post)
   ggomg (1 post)
   mcclaincarolyn (15 comments)
   John76 (1 comment)
   juniorhigh (2 comments)
   pak (2 comments)

Vicki Marcinco had a job posting as a blog entry, but I assumed it was in 
good faith. Neil Schelly is not blocked, but he isn't a "contributing user" 
either. If he's testing on behalf of OASIS as his e-mail address suggests, 
he should be enabled as a "contributing user". Otherwise, his car photo 
should be deleted from his posting.

Going forward, we might want to further limit what "authorized user"s can 
do. We would move most of the content contribution privileges to 
"contributing user" and ask users to apply for "contributing user" 
privileges. If we need to phase it in, a first step would be to require 
moderation for all comments. If we can monitor the moderation queue 
frequently enough, keeping it clear should be easy. The moderation queue 
can be accessed via the content admin link, which goes to 
http://dita.xml.org/admin/node. If it were possible to get notifications 
when new comments are posted, the response time could be quite good.

User profile info seems to be corrupt for:
    Michael Priestley
    Bruce Esrig
    Don Day (fields contain meaningless characters)

Reminder to self: check calendar ... Editorial board meeting today
8 March 2007
2:00-3:00 pm ET
+1-402-756-9000 access code: 162307#

Best wishes,

Bruce