XYZ Distributor
Access to brand 1, brand 2, brand 5
- Master of Distributor Group
+ Office 1
- Master of Office
- Sub Account
+ Office 2
- Master of Office
- Sub Account
ZYX Distibutor
Access to brand 1, brand 3, brand 4
- Master of Distributor Group
+ Office 1
- Master of Office
- Sub Account
+ Office 2
- Master of Office
- Sub Account
I have been trying to figure this out for over a month. I have tried OG and it doesn't work for this. These users can only view and download, they have no editing rights. Only the Webmaster can add new Distributor groups or set the Master for the Distributor group. The Master's can add/edit/delete users per their group. Access to brand material is dependent on the group. There are over 100 different distributors and multiple offices under each.
The entire Extranet site is dependent on setting up the Groups and I am now grasping at straws. I thought that the taxonomy in Drupal extended to users, but was wrong and this project is teetering on failure unless I can get this resolved quickly.
Note: I am using Domain Access, as the distributor Extranet is one site among other public branding sites.
i.e.
0. Distributor Login
1. Company Site
2. Brand Site 1
3. Brand Site 2
... so on.
Any help would be appreciated.
Comments
Don't know if you've tried this
but you can apply taxonomy to users by "Taxonomy Access Control". It seems like it is flexible enough to do your job (though I use it in a much simpler fashion), but the set-up/administration may become a bit hairy if the list of companies/etc gets large.
Hope this is of some use,
Gareth
How do I restrict administration to each group?
I am not sure how I would restrict the Master Account holder to administrate just their group using Taxonomy terms to group the users. The Master needs to be able to admin each of their groups by adding/editing/deleting users. Can I set up a User Role that would allow for this?
Geared Design
taxonomy controls plus content types...
okay, here's a simple workflow-based solution: use taxonomy access controls (not required for this) and also create several new content types - one for each group. they're all going to be pages BUT you can name them "group1 pages" and then in user permissions simply give members of that group only permisson to add/create/etc ONLY that content type (again, just a page or whatever) - that way they can't touch or screw around with other groups' content - and you can do this without OG...then, with OG you can actually do quite a bit more by manipulating access to those content types within groups...
as for user roles - yes, create a new user type like 'group admin' and give that user class permissions to do stuff...
I don't understand this
I make each group a new content type? There are over 100 groups. This is a user control thing, not a content control thing. All the content is being controlled by the Webmaster account. OG makes no sense to me. It allows users to create their own separate groups and content. I want all this control to be held by the main admin.
I have a Distributor based company that needs an extranet that spans content from 5 brands. Each distributorship needs a master admin that can add the rest of that companies users under their account. These groups need to be assigned to the appropriate brands that their company reps. Maybe I can't explain this very well.
I really not sure I understand the solution you've offered. But thank you for attempting to help.
Geared Design
og has permissions though
so i'm at a bit of a loss...OG will allow you to remove the permissions for users to "Create Groups" within user permissions - so they can join and all of that, but not create them....
also, it sounds like you should look at a multisite installation (multiuser) though i have no experience in these...that would allow for you to create these 5 top level brands as 'sites' (all sharing one back end) and then install each as a site and each with an admin with limited rights (eg not install modules, but everything else in terms of workflow)
ignore that content idea - that is the wrong way to go.
We need this too
Gear, have you made any progress on this?
We think that taxonomy provides the only solution. But it would be some major effort to control roles by account subtype.
Does anyone have new ideas for this?
Is this the answer?
Using Taxonomy_access module for fine grained control. I am reading now, but this is as close as I have come to what we need. It still doesn't deal exactly with subaccounts, but that might be merely another level of grouping in the taxonomy.
http://drupal.org/node/200631
Could this be your answer,
Could this be your answer, Geared?
Controlling Access to Content by Configuring Groups as Roles
http://drupal.org/node/200631
At the end, he also extends the solution further with multiple sites. It looks complicated, but close to what I wanted.
Hope this helps.