This questions is semi related to #1539928: Panels IPE allows users without node edit permissions to use 'Customize this page' and 'Change this layout' and maybe it's more of an OG module question than a panels/panelizer question, but here goes:
On a site that uses OG and panels to control OG homepage layouts, is it in theory possible to have granular per-group permissions for OG node layouts, content etc?
For instance right now if a user has the global panelizer permission to edit panelized node layouts, they can rearrange the blocks etc. for groups they aren't members of.
In an ideal scenario, all site users of a certain role could be granted the global permissions to create and administer organic groups and also to edit panelizer layouts, but at a group level, through the group permissions configuration, users could only edit the layouts of group nodes of which that user is an owner or administrator of.
It seems to me based on my initial experiments with the Open Academy (http://drupal.org/project/openacademy) project that this might be possible?
| Comment | File | Size | Author |
|---|---|---|---|
| #14 | og_permissions.png | 109.36 KB | Helrunar |
| #14 | panels_permissions.png | 143.02 KB | Helrunar |
| #14 | panelizer_permissions.png | 115.17 KB | Helrunar |
| #10 | panelizer-n1751426-10.patch | 3.76 KB | damienmckenna |
Comments
Comment #1
merlinofchaos commentedAs of the latest -dev, Panelizer now requires you to have permission to edit the underlying entity in order for IPE to function. Is that sufficient?
Comment #3
StephenOTT commentedCould each of the Permissions that are available as part of People>Permissions>Panelizer be available as part of OG permissions?
Comment #4
merlinofchaos commentedI don't know that there would be a way to do that, unfortunately.
Comment #5
heyyo commentedI also need this functionnality, I found a sanbox which has been made for this purpose:
https://drupal.org/node/1596390
But this project doesn't seem ready yet.
Any other progress on this issue ?
Comment #6
guillaumev commentedI also have the same problem, with the following use case: for each group, I have managers and editors. Managers are supposed to be able to administer the group and use panelizer, but I don't want editors to be able to use panelizer (ie editors should only be able to edit the content within a group, NOT the layout)...
Comment #7
guillaumev commentedHi,
Given that I needed this functionality, I'm providing an initial patch which should work with group content (ie it will allow you to set panelizer permissions within a group for the group content only).
Comment #8
guillaumev commentedHere is an updated patch which also provides OG permissions to panelize the group node.
Comment #9
heyyo commentedThe patch provided in #8 works great for me, but to make it work I need to also give Panelizer permissions to logged-in users in Drupal Permissions (admin/people/permissions).
For example "Administer Panelizer layout" + "Administer Panelizer content". And only after I have access to Panelizer settings with an admin OG.
Comment #10
damienmckennaRerolled, plus fixed a few minor things with whitespace.
Comment #11
damienmckennaCommitted.
Comment #14
Helrunar commentedI've got the same issue with the latest dev-Version of Panelizer from 2015-Jan-19 and i can see all the new permissions. I have unchecked all Permission, so the Role should not be able to administer Panelizer on the organic group, but it not working. The Editor-Role are able to administer Panelizer for OG without any permissions set.
Comment #15
Helrunar commentedComment #16
damienmckennaEclipseGc added a patch (#2435003: Allow contrib to collaborate with panelizer access) to allow other modules to change the permissions, so this need will be rolled into a separate module.