System Permissions

Description

This is a simple module that sub-divides several core permissions to allow for more fine-grained control. In other words, it restricts the powers granted by the core permissions such as 'administer system configuration' and 'administer users.'

It add the following permissions:

'administer themes', (Drupal 6)
'administer role permissions',
'administer roles',
'administer site information',
'administer modules', (Drupal 6)
'access admin by module', (Drupal 6)
'access settings pages', (Drupal 6)
'administer access rules', (Drupal 6)
'administer node settings' (Drupal 6)
'configure theme' for each installed theme

Hopefully the intended use for most of these is obvious enough. (Permissions removed from the Drupal 7 version have been replaced by equivalent permissions in

An example configuration would be to grant a role 'administer users' and 'administer permissions', but NOT the newly provided 'administer role permissions'. This would allow such users to create new users and assign them existing roles, but not modify the permissions assigned to roles.

Since a main purpose of this module is to remove access provided by core permissions, it would not be unusual to install this module and not assign any of it's permissions at all.

Note

This module overlaps significantly with the Site Configuration Permissions which has a much larger user base and longer history. User are encouraged to evaluate it as an alternative to this project. Developers are encouraged to submit patches to that project which would add unique features found here.

One key difference in philosophy between the two projects is noteworthy: With Site Configuration Permissions, the core 'administer site configuration' permission is treated as an override; that is, the permission provided by that module are ignored when the 'administer site configuration' permission is granted. System Permissions module prefers the idea that specific permissions are dependent on more general permissions, not exceptions to them. This approach is what makes System Permissions useful without any special configuration.

Module maintained by Ninjitsu Web Development.

Downloads