Hi

First of all thank you for this feature rich module.
My question : Is it possible to grant users specific role per domain. In my case I've one parent domain that all authenticated users should be able to 'Read' on and many child domains that users can Read/Write based on their role in respective domain.

thanks
arvind

Comments

agentrickard’s picture

agentrickard
he/him
Primary language English
Location Georgia (US)
commented

In theory, you could use the Domain Prefix module to create specific 'user_roles' tables for each domain, but that seems risky to me.

Using the Domain Strict module, you can already restrict read access to domains that the user is a member of. You can also configure the module to force users to post to domains that they belong to.

Take a look at the documentation, especially sections:

3.1 Module Permissions
4.2.2 Content Editing Forms

You may need a small custom module to handle your rules, though.

agentrickard’s picture

agentrickard
he/him
Primary language English
Location Georgia (US)
commented
Status: Active » Postponed (maintainer needs more info)
scedwar’s picture

scedwar commented

I can see the value in this functionality. It would be analagous to og_user_roles in the domain context.

Use case, on our site http://www.charityrallies.org we have editors for each rally. They have the full control over nodes on their own domain, but we also need to grant them access to useful modules such as modr8, faq_ask etc. It would be nice to restrict the role that provides those extra controls to just the domain that the user is a member of.

agentrickard’s picture

agentrickard
he/him
Primary language English
Location Georgia (US)
commented
Version: 5.x-1.1 » 5.x-1.4
Status: Postponed (maintainer needs more info) » Active

Did you try table prefixing? It might do what you need.

scedwar’s picture

scedwar commented

I'd need to read up on this in more detail to really be able to assess the options. However, one option would be a "Domain Role Strict" which only gives roles (above that of standard authenticated user) if the user is a member of the domain. In that way, membership is irrelevant until you begin to grant more powerful roles.

ArvindSingh’s picture

ArvindSingh commented

Thanks agentrickard. And apologies for the delayed response.

Yes, I am using Table Prefix module on my site where I am maintaining domain specific forums and taxonomies. I have not tried this with Users or User Roles though.

On my site I have one parent domain and multiple subdomains.
For e.g :

    domain.net
  • sub1.domain.net
  • sub2.domain.net
  • sub3.domain.net

    the site access rules are:
    1. Users will be part of the root and one sub.
    2. Administration: For each of the subs there is to be a restricted admin user who is responsible for that domain only.
    3. All users should be able to post content on sub or root.

    "In theory, you could use the Domain Prefix module to create specific 'user_roles' tables for each domain, but that seems risky to me."
    - I was thinking about this too. but why do you think it is risky?

    Using the Domain Strict module, you can already restrict read access to domains that the user is a member of. You can also configure the module to force users to post to domains that they belong to.
    - Can I still use Domain Strict module in my case as i want to restrict only admin types of roles on the root site.

    Thanks again for your time.

agentrickard’s picture

agentrickard
he/him
Primary language English
Location Georgia (US)
commented

"In theory, you could use the Domain Prefix module to create specific 'user_roles' tables for each domain, but that seems risky to me."
- I was thinking about this too. but why do you think it is risky?

Because I do not know what the outcome would be. If the $user object is populated for each page load, you _should_ be fine.

Using the Domain Strict module, you can already restrict read access to domains that the user is a member of. You can also configure the module to force users to post to domains that they belong to.
- Can I still use Domain Strict module in my case as i want to restrict only admin types of roles on the root site.

Well, typically, this is handled through the "edit domain nodes" permission. A user with that permission can edit (or post) to any domain that their account is assigned to.

You might look at some of the advanced permissions (edit domain nodes, show domain publishing) before trying anything else.

agentrickard’s picture

agentrickard
he/him
Primary language English
Location Georgia (US)
commented
Status: Active » Closed (fixed)
ArvindSingh’s picture

ArvindSingh commented

Thanks. I've shelved this requirement for the time being. I'll keep you updated if something turns up.

drupalok’s picture

drupalok commented

any approach on this? i would really love to see this feature!
thanks for helping!