Unable to access admin/people even if users have the ability to create new users. [#1776666]

I'd suggest that we need to introduce a new permission access users overview that grants access to admin/people, similar to how node.module has a access content overview permission. This allows for easier management without needing to grant the all powerful administer users permission, or knowing that the create user page is located at /admin/people.

Comment	File	Size	Author
#7	administerusersbyrole-access_users_overview_permission-1776666-7.patch	1.93 KB	ptsimard
#7
#2	1776666.3-administerusersbyrole-access-users-overview-permission.patch	1.19 KB	mrfelton
#2
#1	1776666-administerusersbyrole-access-users-overview-permission.patch	1.28 KB	mrfelton
#1

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Comment #1

mrfelton CreditAttribution: mrfelton commented 6 September 2012 at 13:57

Status:

Active

» Needs review

File	Size
1776666-administerusersbyrole-access-users-overview-permission.patch	1.28 KB

This should work, but it's not in mysetup. Well, it works for admin/people/people, but not for admin/people.

Comment #2

mrfelton CreditAttribution: mrfelton commented 6 September 2012 at 13:57

File	Size
1776666.3-administerusersbyrole-access-users-overview-permission.patch	1.19 KB

Oops, here it is against a clean checkout (I had another patch applied when I created that)

Comment #3

mrfelton CreditAttribution: mrfelton commented 18 May 2013 at 11:47

Status:

Needs work

» Needs review

Actually, this does work perfectly. My issue was because I also had admin_views installed. I resolved by adding the following to my own module:

/**
 * Implements hook_views_default_view_alter().
 */
function mymodule_core_views_default_views_alter(&$views) {
  if (isset($views['admin_views_user'])) {
    // Adjust the permissions for the people admin screen so that users with
    // administerusersbyrole's 'access users overview' can access.
    $handler =& $views['admin_views_user']->display['default']->handler;
    $handler->display->display_options['access']['type'] = 'perm';
    $handler->display->display_options['access']['perm'] = 'access users overview';
  }
}

Comment #4

kaizerking CreditAttribution: kaizerking commented 16 September 2012 at 04:44

Should we apply this patch #2 or not?

Comment #5

mrfelton CreditAttribution: mrfelton commented 17 September 2012 at 08:12

Status:

Needs review

» Needs work

I think we might need an upgrade path - one that grants the new permission to all users that hav the administer users permission.

Comment #6

2 January 2014 at 19:06

Status:

Needs review

» Needs work

Correcting issue status, see #2125263: Issue status not taken from last comment during D7 migration.

Comment #7

ptsimard CreditAttribution: ptsimard commented 3 November 2014 at 20:14

Issue summary:

View changes

File	Size
administerusersbyrole-access_users_overview_permission-1776666-7.patch	1.93 KB

Here is a a new patch combining #2 and including the hook in comment #3.

I think that hook should be included in administeruserbyroles and I'm using it with it patched in.

Sorry I have nothing to say at this time relating to the upgrade path issue.

Comment #8

sinasalek CreditAttribution: sinasalek commented 8 November 2014 at 19:22

Status:

Needs work

» Reviewed & tested by the community

I thinks this is really essential patch, giving administer users permission is too much and can causes security issues.
However it does not seem to work for me.
Also there is another patch that has some overlapping with this one #1717876: Remove dependency on 'Administer users' permission

Comment #9

ptsimard CreditAttribution: ptsimard commented 8 November 2014 at 20:01

Oh yes, I forgot, I am using the https://www.drupal.org/project/user_settings_access refered in that issue by https://www.drupal.org/node/1717876#comment-8278033 to make this work. I think we should probably patch in what that tiny module does.

Comment #10

AdamPS CreditAttribution: AdamPS commented 21 November 2014 at 01:51

Comment #11

AdamPS CreditAttribution: AdamPS commented 25 November 2014 at 23:11

Assigned:	Unassigned	» AdamPS
Category:	Feature request	» Bug report
Status:	Reviewed & tested by the community	» Needs review

I intend to fix this as part of #2378869: Meta-issue for Beta 2 release. Please sign up as a follower of that issue and there will shortly be a patch that I would like feedback on.

I have taken the patch from #2, with slight modifications. I test both the new permission and "Administer Users" which reduces issues with losing permission when the module is added. I have also added migration code.

I have not taken the patch from #3 as I don't use that module so can't test it. The code would likely need to be altered a little to work on top of the batch of changes I'm committing. If anyone does have interest in providing the modified patch, please raise as a separate issue as a feature request. I would need a patch based on the code after the beta2 release is published.