the users have to get "administer users" access and therefore they can access admin/user/user page and by this delete/block all users of all domains.

i think this is not the correct behavior.

i've altered the module as follows:

function domain_user_edit_perm() {
return array('edit domain users');
}

and then switched the "administer users" and "edit domain users" permissions.

by this the user with "edit domain users" permission cannot access any other page except the user edit page.

CommentFileSizeAuthor
#3 domain_user_edit.patch846 bytesJohnny vd Laar
#2 domain_user_edit.patch846 bytesJohnny vd Laar

Comments

blackdog’s picture

blackdog commented

Can you make a patch of this? I don't really understand what you've changed.

Johnny vd Laar’s picture

Johnny vd Laar commented
StatusFileSize
new domain_user_edit.patch846 bytes
Johnny vd Laar’s picture

Johnny vd Laar commented
StatusFileSize
new domain_user_edit.patch846 bytes

attached is the patch

blackdog’s picture

blackdog commented

Ahh, now I understand what you've done. Looks good. I'll have to test and get back to you. Thanks!