Changes to Database-Generated Roles, 2011

As discussed at 3gRolesAccounts20110817 the following changes will be made to database-generated roles when Prometheus moves to using the '3g' database feed from Theon.

Easy Summary:

• All "class-*" roles will disappear for all students.
• All "year-*" roles will disappear except for "year-ug[12345] and year-msc" which will be generated per-student as before.
• All "old-degree-*" roles will disappear for all students pre-dating 2011 intake.
• All other student related roles ("[[old|new]-]degree-*", "module-*") are retained as-is for now.
• The 3g feed has no effect on staff and staff related roles - these remain sourced from 2g.

Slightly more detail:

This list details the systematic changes being made. Glitches affecting individual students or members of staff are possible and will be fixable by frontline support or RAT unit .

Entitlements

Ross' summary of the entitlements currently being granted / inherited follows:

class-*
- all inherit the appropriate @year- role

year-*
- all inherit the equivalent @year-ug role
except
year- msc which gets
- @inactive-person
- @homepagesuser
- @matlabclassroom
- printing/colour/print
- web/blog/create

year-ug*
- @inactive-person
- @matlabclassroom
- @homepagesuser (ug3, ug4, ug5 only )
- @homepageswebuser (ug1, ug2 only)
- @atl3console (ug1 only)
- printing/colour/print (ug4 & 5 only)

tutor-*
Usually empty except
tutor-[ads | ai2a | ai2b | ar-v | cp1 | ct | fps | gagp | inf1b | km | pmr-v | sdp | seoc]
- @inactive-person
- @submit ( cp1 only )
- web/wwwinf/inf1staff (inf1b only)
- web/wwwinf/inf2dstaff (inf2d only)
- web/wwwinf/sdpstaff (sdp only)

demonstrator-*
Usually empty except
demonstrator-[cp1 | iar-4 | inf1b | ivr | cs1 | cs1ah | cs1bh | hc1h]
- @inactive-person (cp1, iar-4, inf1b , ivr only)
- @atl3console (cs, cs1ah, cs1bh, hc1h only)
- group/iar (iar-4 only)
- login/teaching/iar (iar-4 only)
- web/wwwinf/inf1staff (inf1b only)

ta
- @inactive-person
- @submit

ta-*
Usually empty except
ta-[cfcs1 | comn | cs2a | cs2b | hci-4 | hci-5 | icl | icl-v | ijp | inf1a | inf1b | inf1-cl |
inf1-fp | ai2b | aile-4 | aile-5 | ta-ar-4 | ta-ar-4-v | ta-ar-5 | fmcs1 | ip]
- @ta
- @inactive-person (ai2b, aile-4, aile-5, ta-ar-4, ta-ar-4-v, ta-ar-5, fmcs1, ip  only)
- web/wwwinf/inf1staff (inf1b only)

"degree-"  (typo?)
@active-person

degree-*
- @active-person
- @student
- @homepagesuser (csmscres,  ext, extphd, mphil, mscnro,  mscres, csmscres, phd,  phdpub only)
- @homepageswebuser (infvisug only)
- @atl3console (phd, phdpub only)
- login/staffssh/remote (aimphil, csmscres, extphd, mphil,  mscnro, mscres, csmscres,  phd,
phdpub only)
- printing/eucs/print (aimphil, csmscres, mphil, mscnro, mscres, csmscres, phd, phdpub only)
- printing/colour/print (aimphil,  csmscres, eimsc, mphil,  mscnro,  mscres, phd, phdpub only)
- login/phdmachines/console (extphd, mphil ,phd, phdpub only)
- web/blog/create (phd only)
- web/wwwinf/isdd (phd only)

module-*
- @inactive-person
- @homepagesuser (ad)
-  db/pgteach/user (ad, adbs, adbs-4 only, adbs-5, dbs, dbs-v, ec, ec-v, inf1b)
-  login/lfdcs/remote (dme)
-  login/hadoop/remote (exc)
- @beowulfuser (exe)
- printing/colour/print (ijp-v)
- @year-ug1 (inf1a, inf1b, year-ug1, inf1-da, inf1-dc, inf1-fp, inf1-op)
- @year-ug2 (inf2a, inf2b, inf2c, inf2d)
- web/wwwinf/irm (irm-4, irm-4-v, irm-5)
- @colourprinting (sdp)
- group/module-sdp (sdp)

new-degree*
- @active-person
- @new-student
- @homepageswebuser (ext)
- @homepagesuser (mphil, mscres, phd)
- login/phdmachines/console  (mphil, phd)
- @atl3console (phd)

new-person
- all

new-staff
- @active-person
- @homepageswebuser
- afs/loc/staff

new-student
- afs/loc/student
- afs/undercommit