Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
I've got a site install that uses the Admin_Menu and "Menu Block" menu item shows up for user roles that shouldn't have access to it.
There needs to be a way to control permissions to Menu Block settings.
Comments
Comment #1
JohnAlbinIf a user has permission to "administer blocks", then they should have permission to add and configure menu blocks, IMO. Menu blocks menu items only show up for those users.
Comment #2
tstackhouse CreditAttribution: tstackhouse commentedSubscribing. I don't necessarily believe this is the case. I think this should be a separate permission. I need to have my (non technical) staff users be able to edit and update custom text blocks from core and configure other blocks. I don't want them creating new blocks and screwing with the menu system. This is bad UX in my opinion having the option there but telling them not to touch it, this should be policy enforceable by permissions.
Comment #3
trevorsheridan CreditAttribution: trevorsheridan commentedI agree. This should be a separate permission.
Comment #4
Dave ReidShould we maybe use a combination of user_access('administer blocks') && user_access('administer menus')?
Comment #5
r0bm1lls CreditAttribution: r0bm1lls commentedUsing this in D7.2. Confirm that menu blocks linked to administer blocks permissions. Would be good to be able to have this module have its own permissions.
Comment #6
anouI agree with this. Is permission settings for "menu block" will be implemented or it's just not going to ?
Thanks anyway for your module !
David
Comment #7
burgs CreditAttribution: burgs commentedThis would be really nice to split them out. Especially the access permissions to edit settings at admin/config/user-interface/menu-block
Comment #8
davepoon CreditAttribution: davepoon commentedAgree, it would be great to have a more granular control to hide the Menu Block settings item.
Comment #9
gkom CreditAttribution: gkom commentedI agree. Permissions should be split. Just because a user can add blocks doesn't mean they should be able to change the module's settings.
Comment #10
loren.swendsen CreditAttribution: loren.swendsen commentedSubscribing and voicing opinion. I really wish menu block had separate permissions. I want to give some users the "administer blocks" permission but it just scares me what they could do to the menu system, even by accident.
Comment #11
JohnAlbinDave's suggestion makes a lot of sense.
Comment #12
JohnAlbinFixed. http://drupalcode.org/project/menu_block.git/commitdiff/4d7a382