RoleAssign

RoleAssign specifically allows site administrators to further delegate the task of managing user's roles.

RoleAssign introduces a new permission called assign roles. Users with this permission are able to assign selected roles to still other users. Only users with the administer access control permission may select which roles are available for assignment through this module.

RoleAssign is developed by Thomas Barregren of imBridge. The initial release was sponsored by Qondoc System.

Background

It is possible for site administrators to delegate the user administration through the administer users permission. But that doesn't include the right to assign roles to users. That is necessary if the delegatee should be able to administrate user accounts without intervention from a site administrator.

To delegate the assignment of roles, site administrators have had until now no other choice than also grant the administer access control permission. But that is not advisable, since it gives right to access all roles, and worse, to grant any rights to any role. That can be abused by the delegatee, who can assign himself all rights and thereby take control over the site.

This module solves this dilemma by introducing the assign roles permission. While editing a user's account information, a user with this permission will be able to select roles for the user from a set of available roles. Roles available are configured by users with the administer access control permission.

Releases

Official releases	Date	Size	Links	Status
6.x-1.0-beta2	2008-Dec-02	12.78 KB	Download · Release notes	Recommended for 6.x
5.x-1.1	2007-May-28	13.56 KB	Download · Release notes	Recommended for 5.x
4.7.x-1.1	2007-May-28	12.45 KB	Download · Release notes	Recommended for 4.7.x