[OGo-Users] advanced search questions

[Olivier Hallot]

Adam Tauno Williams escreveu:
(...)
> This ["(contactId={me})] should be *trivial* to implement,  probably
> just WebUI stuff since -
> #!/usr/bin/env python
> import xmlrpclib,pprint
> server = xmlrpclib.Server('http://adam:*********@localhost/RPC2')
> fetchSpec = {}
> fetchSpec['qualifier'] = "contactId = 27190"

yes, I whish I knew how to  transform 27190 into a human-readable ogo
account in the webUI...

> result = server.person.fetch(fetchSpec)
> pprint.pprint(result)
> - already works, so the required command logic must be completely in
> place.
> 
> 
(...)
>> As for a search inside the contacts you own, this has been the major
>> reason for a customer to drop OGo as they were not able to manage
>> privacy the way users like (read: "my contacts are for me and not for
>> you, period"). 
> 
> Like: "((ownerid == {me}) && (isPrivate = 1))" ?

Yes. (ownerid={me}) was the main issue with this customer, used to
oultook. (isPrivate = 1) was the request of the executive assistants who
have sensitive data not  to be exposed to the rest of the enterprise.

OGo also does not handle public & private address as well as public &
private phone the way corporations expect. Private info should be kept
restricted. With OGo, either you show all or you hide all. ACL for
instance, applies to the whole record.  One can think I am splitting
hairs here, but believe me, privacy is a personnal security issue for
many, many people and is taken very seriously (from inconveniences to
threats).

Nevertheless, the completness of the data model in OGo makes me believe
that such privacy issues enhancements are forseable.

> 
> Although this wouldn't be completely true as I believe ACLs trump the
> privacy flag;  and I suspect ownerId == primary user is less frequently
> true then one suspects (since owner == creator).  Using contactId seems
> more correct.
> 
> <aside>"mine" is a dumb way to approach data, but I completely
> understand what you mean.</aside>

= selfish-ness. The Homo-Corporatus specie instinct is to "share
nothing", as you know.

> 
>> Lesson taken: if you cannot mimick outlook, do not try to
>> fix your user.
> 

-- 
Olivier Hallot
Scinergy Consulting
Tel (021) 8822-8812
Rio de Janeiro, Brasil
http://www.scinergy.com.br