This is brilliant! It's almost exactly what I needed for a project I am working on for a local school but there are two issues that prevent me from using it on a production site...
1. Firstly and most importantly, the administrator account is accessible! Which means the 'Editor' role (has permissions to assign roles) can edit the administrator account and change the password, email address etc.
2. Secondly, the filters on the /admin/people/ page have the following options:
"show only users where permission"
- Role
- Permission
- Status
Is there a way of hiding the 'Permission' option so that the 'editor' user can't see a list of all the permissions on the system?
If so this would make this one of the most useful module I've come across!
Comments
Comment #1
Rix-1 commentedComment #2
Rix-1 commentedOk got past point 1 by installing the "Administer Users by Role" module. I guess the second one I could override the user admin php to hide 'filter by permission'.
I was going to delete this issue but will leave it up in case others face the same problem.
Comment #3
Rix-1 commented