By systematic on

I am struggling to get my head around the various modules for permission and access managment. I need a way to allow only one user and all members of Staff to access some pages.

I am trying to create a system for a company to share information with clients.

Is it possible to set up Drupal so that when a new client registers he is given an area in which he can add information and file uploads. The page would be visible by staff and the client who "owns" it but no other client. The information I envisage for each client includes Surveys, Articles, Comments. No client should see links, teasers, or any information about any other client's area.

All permissions seem to be role based.

One concept I have is that I create a role and a taxonomy term for EACH client ie for 200 clients I have 200 taxonomy terms and 200 roles! I then allow each role to access only its own sub-category using Taxonomy_Access. Staff role can access all Client Categories also using Taxonomy_Access.....

This seems a bit awkward... I feel I must have missed something?

Thanks for ANY advice, reassurance or pointers.

Comments

mtaqi’s picture

mtaqi commented

read below:

Users who are not a part of groups permitted to access an element can not view the element

"How do I"-style questionsmtaqi - October 27, 2005 - 21:50
Hi,
I have created 4 different roles and have assigned each role a category.
Each role also has a group of users assigned to it, so what I would like to do is:
when user A who belongs to role A should be able to view and edit CATEGORY A, but should not be able to view or edit CATEGORY B and a message should display that they do not have rights to access this page.

How do I achieve this?

any help would be greatly appreciated,
-mahvash

systematic’s picture

systematic commented

Nice to know I'm not alone in finding this difficult.

It is frustrating. I can see the potential, Some of the modules are great. The coding and presentation separation looks good... if only I could get the privilege management right.

Is there anyone out there with a useful insight? Or even confirmation that I am trying to do something difficult?

Thanks.

cel4145’s picture

cel4145 commented

Unless things have changed recently, this seems to be a major flaw in all of the permission modules. Permissions can only be set by roles, not for individual users. There's an issue requesting individual user level controls for node privacy. Might be worth adding in your two cents.