- 🇩🇪Germany Anybody Porta Westfalica
Just ran into this in a large project and was wondering why "Administer user roles" is still combined with administering permission.
So +1 on finishing this, where Drupal is today!
On busy websites with many users, it becomes essential to be able to delegate some tasks, for example the management of the user's roles. As it is, you can give the 'administer permissions' to the users who will be in charge of managing the user's roles, but this also allows them to access the Roles and Permissions admin pages!
The RoleAssign module creates this permission, but I believe this feature would be useful in the core, as opposed to having to use an extra module for such a basic feature. (see the desription of the module for more information).
Here is a statement of the access control page.
Permissions also allow trusted users to share the administrative burden of running a busy site.
No doubt this extra permission would extand the flexibility of sharing the administration of busy sites.
As suggested in #7 create two new permissions:
(and keep 'administer permissions' to give access to admin/people/permissions)
Two new permissions
None.
None.
Needs work
11.0 🔥
Last updated
It makes Drupal less vulnerable to abuse or misuse. Note, this is the preferred tag, though the Security tag has a large body of issues tagged to it. Do NOT publicly disclose security vulnerabilities; contact the security team instead. Anyone (whether security team or not) can apply this tag to security improvements that do not directly present a vulnerability e.g. hardening an API to add filtering to reduce a common mistake in contributed modules.
Issue summaries save everyone time if they are kept up-to-date. See Update issue summary task instructions.
A change record needs to be drafted before an issue is committed. Note: Change records used to be called change notifications.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Just ran into this in a large project and was wondering why "Administer user roles" is still combined with administering permission.
So +1 on finishing this, where Drupal is today!