What is the problem to solve?
Currently, when you install a new Drupal site with the Standard profile, you get 3 user roles by default: admin, Authenticated user (logged-in user when
this issue →
is fixed) and Anonymous. The admin role is supposed to serve for site building and development purposes and comes with almost every existing permission by default. The Authenticated/logged-in role has the same permissions as the Anonymous user (viewing content) plus is able to post comments. Drupal is a content management system but we don’t have any default user role to just manage content.
Proposed resolution
This proposal aims to create an out-of-the-box editor role to serve Drupal’s main purpose: manage content.
Who is this for?
This solution will be focused mainly on content editors’ needs, but it’ll also be useful to guide and help site builders as part of the basic setup. So instead of the initial user story phrasing focused on the site builder/developer (for example: "A module developer can assign permissions to a content editor role"), we would say “A content editor can create content (...)” to focus on the content editor requirements. We need to define the minimum common functionalities that make sense in most of the project scales, and the initial set up should be easily extended.
Also, as @mlncn suggested, any modules that choose to use progressive enhancement if this particular role is present will be much improved.
Result: what will be the outcome?
As a result, when Drupal is installed with the standard profile, a new role will be created with a new set of permissions and options.
For content editors, the minimum industry-expected standard permissions for content editors will be set already.
For site builders, this role will be already created with basic permissions defined, which also might serve as a the starting point to enhance a project if needed and as a guide for best practices.
How can we know the desired result is achieved?
We need to define what are the minimum common functionalities/permissions and what are the industry-expected standards. Given Drupal solves a diverse scale and functionality-wise spectrum, we need to define a set of minimum of permissions and options that:
- Most Drupal sites will need
-
- Don’t create any conflict (like deleting other users’ content)
To find out this minimum common functionalities, we need to know what users expect and what the rest of the industry is doing. To do so, this initial plan is suggested to define and validate decisions and ideally it’ll be updated with sub-tasks if it’s approved:
- Find out and list what competitors are doing. Some first results were gathered by @pixelite and Annika in the Comparative Study in the Admin-ui initiative.
- Creating basic pages, uploading images and files, managing tags… Some information already can be used from the initial survey from the Admin-ui initiative; the results can be found here.
- Define the new editor role name and goals, similar to what a persona would define.
- Define the common set of permissions and options for the Editor role in Drupal core. It might define new permissions.
- Create the new editor role with its own set of permissions.
Note that, like
#479708: Rename 'Authenticated user' and 'anonymous user' so they are clearer →
, this is not the opposite of
✨
Remove hardcoded anonymous and authenticated user roles
Postponed: needs info
.