Separate submodule permissions

nirbhasa - May 1, 2009 - 14:11
Project:Domain Access
Version:6.x-2.0-rc8
Component:- Domain Conf
Category:feature request
Priority:normal
Assigned:Unassigned
Status:postponed
Description

At the moment to configure individual domain settings in /admin/build/domain/conf/(domain ID) , you need the 'administer domains' permission, which also gives you the right to create and assign domains.

However, I'd like to allow people in a 'domain manager' role to configure the settings of that domain, without giving them any rights over other domains. I'm wondering what you think about a separate 'configure domain' permission? It's be something we'd need, so I'd be willing to work up a patch. I just thought I'd run it by you to see if you had any better/simpler ideas :)

This permission could also be used when configuring domain-specific blocks and menus.

Alternatively we could keep the 'administer domains' permission, but when they access the settings page for a domain we check if they are assigned to that domain. However this means they could still access the domain create forms, bulk editing etc., right?

#1

agentrickard - May 1, 2009 - 15:11

You would need a permission in Domain Conf module, and a custom access callback on the two existing menu items.

The access callback would check if:

-- User can 'administer domains' (or, alternately, 'configure all domains').
- or -
-- User can 'configure assigned domains' AND user is member of the domain being edited.

I would prefer not to make this change right now, as we are trying to get a stable release out.

#443296: Tasks for stable release

A patch would need to include documentation changes.

#2

agentrickard - May 25, 2009 - 17:24
Status:active» postponed

#3

agentrickard - June 14, 2009 - 20:02
Title:'Domain configuration' permissions» Separate submodule permissions
Status:postponed» active

We should consider splitting out the permissions for all sub-modules.

- Domain Alias
- Domain Conf
- Doman Content
- Domain Theme

The others are already separated or not relevant.

Two ideas:

1) Just do it. Give all the submodules their own perms.

2) use hook_domain_perm() to allow modules to add their permissions settings to DA's. I think this makes for a cleaner interface.

#4

agentrickard - June 28, 2009 - 15:59
Version:6.x-2.0-rc6» 6.x-2.0-rc8
Status:active» postponed

No responses. Postponed for D7.

 
 

Drupal is a registered trademark of Dries Buytaert.