I have run into a simple bug with IMCE profile permissions. It seems that users with multiple user roles are not getting all the associated IMCE permissions from their multiple IMCE profiles.

I have many different types of users on my site, so there are several roles that can be assigned which add permissions as appropriate for each user.

I had initially just left my whole "files" system open to all users of a certain permission level, but now am finding that that is too open and risks users messing around with files that they shouldn't have access to, so I created an IMCE profile to match each user role, making the assumption that all the permissions would be additive, just like for the core User module (each new role you are assigned gives you the additional permissions associated with that role). Makes sense, right?

Unfortunately, it seems IMCE ignores all but one of the profiles for each user (i.e. you only get the permissions from one of your IMCE profiles)

I've had to go with an ugly solution for now, but I'm surprised that this bug still exists in a module that is so mature. Seems like basic permissions functionality :) Anyway - there you go.

Comments

ilkay.can’s picture

ilkay.can commented
Status: Active » Closed (works as designed)

This is by design. You can alter profile settings using a custom module.

doomdahdoomdoom’s picture

doomdahdoomdoom commented

Ok, right - but what I'm saying is that it's very poor design which should be improved to match the rest of Drupal.

:)

pbfleetwood’s picture

pbfleetwood commented

Ditto that: a very poor design. Drupal's strength is in flexibility. Looking over the issue queue, it is clear that many people have this need; probably most people with large, complicated sites. Should everyone have to develop their own custom modules? Should anyone have to develop a new module to extend the functionality to this module that should be part of its design?

mastermirko’s picture

mastermirko commented

From my experience is that even if I define multiple IMCE profiles and associate it with the different roles, all the users are using the predefined IMCE profile.

Is there a way to fix that or is it a bad configuration made by me?

I'm using it togheter with WYSIWYG and TinyMCE.

Thank you

Regards,

DrupalBDGirl’s picture

DrupalBDGirl commented
Issue summary: View changes

I'm facing the same problem. Users can have multiple roles but they are able to see the folder associated with one of the IMCE user profiles. It seems they are not going to add this functionality to the IMCE module. Could you please share the code snippet showing how to do it from a custom module?
thanks in advance!

izus’s picture

izus commented

hi,
i had the same need and i released a contributed module for it.
you may want to try it : https://www.drupal.org/project/imce_multiple_roles_folders