I've got a site install that uses the Admin_Menu and "Menu Block" menu item shows up for user roles that shouldn't have access to it.

There needs to be a way to control permissions to Menu Block settings.

Comments

JohnAlbin’s picture

Status: Active » Postponed (maintainer needs more info)

If a user has permission to "administer blocks", then they should have permission to add and configure menu blocks, IMO. Menu blocks menu items only show up for those users.

tstackhouse’s picture

Subscribing. I don't necessarily believe this is the case. I think this should be a separate permission. I need to have my (non technical) staff users be able to edit and update custom text blocks from core and configure other blocks. I don't want them creating new blocks and screwing with the menu system. This is bad UX in my opinion having the option there but telling them not to touch it, this should be policy enforceable by permissions.

trevorsheridan’s picture

I agree. This should be a separate permission.

Dave Reid’s picture

Should we maybe use a combination of user_access('administer blocks') && user_access('administer menus')?

r0bm1lls’s picture

Version: 6.x-2.3 » 7.x-2.2

Using this in D7.2. Confirm that menu blocks linked to administer blocks permissions. Would be good to be able to have this module have its own permissions.

anou’s picture

I agree with this. Is permission settings for "menu block" will be implemented or it's just not going to ?
Thanks anyway for your module !
David

burgs’s picture

This would be really nice to split them out. Especially the access permissions to edit settings at admin/config/user-interface/menu-block

davepoon’s picture

Agree, it would be great to have a more granular control to hide the Menu Block settings item.

gkom’s picture

I agree. Permissions should be split. Just because a user can add blocks doesn't mean they should be able to change the module's settings.

loren.swendsen’s picture

Subscribing and voicing opinion. I really wish menu block had separate permissions. I want to give some users the "administer blocks" permission but it just scares me what they could do to the menu system, even by accident.

JohnAlbin’s picture

Status: Postponed (maintainer needs more info) » Active

Should we maybe use a combination of user_access('administer blocks') && user_access('administer menus')?

Dave's suggestion makes a lot of sense.

JohnAlbin’s picture

Title: Menu Block Settings Permission » Make Menu Block require 'administer menus' permission
Version: 7.x-2.2 » 7.x-2.x-dev
Component: User interface » Code
Category: bug » support
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.