Hi,

I am using Drupal 4.6.5 and would like to create users with tree-like hierarchy based structure. For example, I would create users with a given role (Forum A user creator) and thoses users would be able to create users only with another given role (Forum A users). My problem is that as soon as I give a user the rights to administer users, he can change his own permissions and set himself up as a site administrator. I would like the user to be able to create users and that's it.

I already know how to restrict users to given forums with the Taxonomy Access module, but could not find out to create users who could then create users but not change their own permissions.

Any help is appreciated.

Thank you.

Comments

ToddZ-1’s picture

I'd like to see this too. But since user classes are defined by access permissions, rather than a hierarchy, maybe it could be implemented as a permission to "administer users of class:" [list of user class checkboxes]

venkat-rk’s picture

I am not entirely sure, but the simple access module might be your answer:
http://drupal.org/project/simple_access

----
Acknowledging a reply to your question motivates the replier to answer more.

Raggart’s picture

Sadly, the Simple Access module, although it could come to be useful in the future, cannot do what I want. It helps with defining access groups which can then include several roles. You could then give permission only to the access group and it would in turn give permission to all included roles.

What I need is more of a way to block certain users off of certain nodes. I could, for example, give users the administer users permission but then block them from all pages except the add user page.

On second thought, that could not work because they could very well add a new user with a high-security role and login using that account. So I really need some kind of hierarchy or control over the roles that could be given to new users.

Raggart’s picture

Any other idea, anyone?