Exclude certain permissions
gordon - April 29, 2009 - 00:55
| Project: | Admin Role |
| Version: | 6.x-1.x-dev |
| Component: | Code |
| Category: | feature request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | needs review |
Description
I need to be able to exclude certain permissions from the admin role such as execute php and the devel permissions.
This would be a static list that you would set up and would be excluded from the admin roles, even when new modules are loaded.

#1
A seconding of this and a concrete example. Ubercart defines an "act as seller" permission which, when enabled on a site running Paypal payment gateway, requires the user with that permission to provide a Paypal email address on their account.
#2
Thirded. There are often permissions I want to exclude from my administrators. Perhaps the most flexible feature would be for admin role to provide an inverse of the standard Drupal permissions system, whereby multiple roles would be admin roles, and each one could have specific permissions switched off.
#3
fourthed?
#4
this patch creates a textarea in the adminrole settings page. permissions listed there, one per line, are ignored when adminrole does its updates.
#5
This is an a new patch for this feature; providing a friendlier UI and currently in production over at Prometheus Labor. Sponsored by Prometheus Labor.
#6
+1 Reviewed and test. Works great!
#7
I've tested this as well, works fine for me. +1 for the functionality.
I'm attaching a slightly cleaned up version of the patch in #5 that should apply cleanly with drush_make.
#8
New patch needs new review. Change status.
#9
@#8: fwiw, the patch is the same code as #5 - only the format of the diff is changed, so I believe it's justified to change the status to 'reviewed and tested', as it's the same code that #6 and I have both tested.
#10
I'm not sure this is the right approach. I'd like to get the original maintainer's (Jacob Signh) thoughts on this first.