Extra permission

maverick14 - February 25, 2009 - 09:31
Project:userplus
Version:6.x-2.x-dev
Component:User interface
Category:feature request
Priority:normal
Assigned:marcp
Status:closed
Description

Maybe you can add a permission for this module "administer userplus". Now only the site administrator can work with the module. I want other users with a webmaster role to be able to work with userplus.

Cool module by the way!

#1

marcp - February 25, 2009 - 17:38
Version:6.x-2.0» 6.x-2.x-dev

I agree that the permissions could use some work to allow for more delegation of user management. Currently, only users with 'administer users' permission can use userplus.

Here is what I'm thinking:

  1. Users with 'administer users' permission will always be able to use everything in userplus
  2. There will be separate permissions for:
    • adding multiple users
    • assigning roles
    • assigning users into organic groups
    • administering userplus settings (to separately secure the page at admin/settings/userplus)

My main concern is that I don't want to open up too many security holes, but I think that administrators are going to be able to figure out how to secure their sites properly with these new permissions in place.

We may want to allow either the user with 'administer userplus settings' rights to exclude some roles from the role assignment screen, but that's probably a follow-on issue.

#2

marcp - February 26, 2009 - 06:24
Assigned to:Anonymous» marcp

The proposal in comment #1 has been checked in and should be available shortly in the 6.x-2.x-dev snapshot.

#3

maverick14 - March 3, 2009 - 11:08

Very cool Marcp!

#4

marcp - March 31, 2009 - 22:46
Status:active» fixed

#5

System Message - April 14, 2009 - 22:50
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.