Hi,

Could you please explain differences with the RoleAssign module.

Thanks,

Joep

Comments

David Lesieur’s picture

StatusFileSize
new9.42 KB

The main difference is that you get a matrix of role assignment permissions. Each role gets its own permissions for assigning roles to users. Here's a snapshot with an example of Role Delegation permissions in Administer > User management > Access control.

Anonymous’s picture

Thanks for your reply!
So Role delegation is a more advanced and granular approuch compared to roleassign.
Please correct me if I am wrong!

Thanks, Joep

David Lesieur’s picture

It provides more granular permissions for sure. But I can't tell if it's more "advanced", as RoleAssign might have some features that I'm not aware of.

svihel’s picture

Im sorry to say that, but I really dont get how is this helping. When I use this permission it enable user to only give it to himself.

Please explain me where am I wrong, probably some more permissions need to be set?

David Lesieur’s picture

See the snapshot. In that example, if a user has the Admin role, he may assign the Editor, Moderator, or Writer role to other users. If a user has the Editor role, he may only assign the Writer role to other users.

To assign a role to another user, one has to go to that other user's profile page (user/uid), then to its "roles" tab (user/uid/roles). To get there, one only needs the "access user profiles" permission and a role_delegation permission.

sun’s picture

What's probably missing in Role Delegation is a (convenience) "assign all roles" permission.

Other than that, it would be great if you could join forces with the maintainer of RoleAssign. Both modules are providing very similar functionality, and I really wished Role Delegation would have been a v2.x of RoleAssign only. Now, both modules deal with security, and like always when dealing with security, there can't be enough eyes on the project.

It would be great if you could add a screenshot to the project page along with some notes about the difference to RoleAssign. Even better: Team up with TBarregren and mark RoleAssign as deprecated. You can start by linking to each other's project page.

David Lesieur’s picture

@sun: Very good points. I have followed up in RoleAssign's issue queue and added the feature request to Role Delegation.

salvis’s picture

See #287914: Add role assignment widget on user/edit and admin/user/user/create for why I still prefer RoleAssign over Role Delegation.

David Lesieur’s picture

drewish’s picture

Version: 5.x-1.0 » 6.x-1.x-dev

let's not forget that role delegation has been update for D6. at this point that's a pretty big feature.

sun’s picture

@David: If you would add the screenshot in #1 to the project page, along with a note that Role Delegation supersedes RoleAssign (pointing to #272950 and #287914), I think we can mark this issue as fixed. If your time doesn't permit this, you can grant me CVS access and I'll care (at least) for this. ;)

David Lesieur’s picture

@sun: Good ideas. CVS access granted — great to have you on board! :-)

sun’s picture

Status: Active » Fixed

Thanks, updated the project page accordingly.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.