By galiant on

My question is related to Roles and Registration on the site.
I am the main admin for the site and I wanted to allow someone else lower level administration access.
Sounded simple went in and created a role called "webmaster" and gave him access to what he needed.
Worked like a champ.

THe problem it created though is now when someone visits the site and registers they are assigned the role of webmaster with admin privilages.. big problem.

So I thought the fix was to create a lower level user role. I did so and now when someone goes to register there is now a pull down that lets them select their account type.

I don't want them to be able to selcect webmaster when they create an account.

I have tried several modules after reading posts, such as "auto assign" and "account_type"
Neither solved my issue.
Auto assign forced them into the correct group, but they were still able to select "webmaster" and get admin authority assigned to the webmaster role. So they ended up assigned to both groups.

Am I using roles incorrectly, is there a waya to turn the pull down off or something else I can do?
I thought about hiding the pull down, but depending on what role (based on it seems alphabet) is first would still be assigned to that user even if I used auto assign. I did a test and created another account "a test" so it was first in the pull down and hid the field. Then I used auto assign... the user ended up assigned to both the auto assign and the first option in the pulldown even though it was hidden. Which was my fear.

We intend to have a few roles, so different people can have access to certian administrative functions and eventually we want to allow users to have access to different features.

I know that we can manually adjust each user, but it would seem to make more sense to have a role setup with the permisions and then assign that role to the user. That was my thought and why I assigned the roles, the problem being that I don't want people to have access to all the roles when they register as a basic user on the site.

THANKS!

⋅ Categories: Drupal 5.x

Comments

cog.rusty’s picture

cog.rusty commented

Disable, uninstall and then delete all the additional modules related to roles which you have added. That was the problem.

Then go through the users and correct their roles, and no more unexpected assignments will happen. All new users will get the "authenticated user" role, which will have the permissions you gave it, and if you want you can give some people additional roles.

Before installing a new module on a working site, you must read, try it in a testing site, and find out exactly what it does.

galiant’s picture

galiant commented

to clarify, your saying that the additional modules are creating the pull down or just the bug with auto assign?
We had the pull down before we installed any modules we just did not catch it until people started having access to things they should not.

I am going to back out now and try again, but I guess my clarification or what I need more info on is.... ability to select account type (role) and what to use.
It sounds like uninstall will fix the double assignments, but it doesn't (unless I am missing something, which is possible) address the fact that I have roles setup that I don't want people to be able to select when they register for the site.

Not ignoring your advice, but as mentioned above the selection of account type was available before we installed any additional modules.

Is there a better module that I should use or is there a way to limit which roles people can use to register under?
I want to have a 3 administrative roles that I don't want people to be able to sign up for and then public roles for community member, non-profit group, church, and corporation. Each will have different roles/abilities within the site.

So I need them to be able to select a role, but not be able to select certain roles.

If there is something I should be reading that I have not please also let me know. I have searched and re-read the documentation for roles and have not found an answer. Not sure where else to look.

Thanks!

galiant’s picture

galiant commented

Ok, uninstalled both the modules... made in active and used internal unistall to remove... then even took them off the server (deleted)

When i did that I did get an error durring unistall...
error removing the Acount Type database tables

I went in to phpmyadmin and looked for those tables, but I can not find them anywhere...maybe why I go the errorr... they were never there.

Anyway, I still have the account type pull-down that is letting people select a role durring registration.

cog.rusty’s picture

cog.rusty commented

That pulldown must be produced by some instaled module, because normally users can't select their own roles at registration in Drupal.

That module must be found, and either configured correctly or removed.

galiant’s picture

galiant commented

that was what I was starting to think... any suggestion on how to sniff it out.
Looking in DB for something or some relationship, not sure what?
Or is the only way to start turning off a module at a time and see what happens and what blows up...hahaha
if you have any sugestions on where to start it would be appreciated.

cog.rusty’s picture

cog.rusty commented

I would start from the /admin/build/module page, where all modules are listed with descriptions, and the /admin page, where their features are listed, and I would search the page for the word role

Except if that dropdown does not list roles but groups or something else.

galiant’s picture

galiant commented

Hurraaaahhh....

Thanks for helping get me pointed in the right direction!

It turned out that the rlisting for realestate listings had a module within it called "user extra"
I disabled user extra and what do you know its gone.

I did what you said and sniffed around and couldn't find anything related to roles and everything "user" related was intentionally added.
That was the only think I was unfamiliar with and what do you know.

Still have to see what I have or have not lost related to the realestate, but at least I can address.

Thanks!

cog.rusty’s picture

cog.rusty commented

A strange module.

It has no releases listed: http://drupal.org/project/rlisting
No past releases either: http://drupal.org/node/319071/release

It does have lots of code submissions, until two months ago:
http://drupal.org/project/cvs/319071

It exists in cvs:
http://cvs.drupal.org/viewvc.py/drupal/contributions/modules/rlisting/?p...

Package available in softpedia:
http://webscripts.softpedia.com/script/Modules/Drupal-Modules/rListing-4...

Either this is a failure of the project release system or there is a story behind this.