I have been using the 1.x branch of this module with the Create User by Role module to add users with preset roles. The Links are added to the Action Links. The links are no longer rendered with the 2.x branch.

Comments

HaloFX created an issue. See original summary.

AdamPS’s picture

AdamPS CreditAttribution: AdamPS commented
Status: Active » Closed (works as designed)

It is not the intention of administer_users_by_role to allow sub-admins to assign roles. The sub-admin is granted permission to create users without any roles, and to manage users provided they have certain roles. There are other modules that allow assigning of roles - for example role_delegation and roleassign.

So I would say this is "works as designed".

It looks to me as if user_create_by_role creates the action links with permission "administer users".

In 1.x you gave your sub-admins "administer users", so they could see the links. However bear in mind this release is fundamentally insecure and the sub-admins can easily gain full administrator access if they wish to. Presumably sub-admins would see all the action links, even ones where they don't have permission to manage users of that role.

In 2.x you no longer give your sub-admins "administer users", so the links aren't available. It's strongly not recommended, but you could give your sub-admins "administer users". They will then see the links again, but your site becomes fundamentally insecure again.

Hope that makes sense - feel free to re-open and comment if you wish.

HaloFX’s picture

HaloFX CreditAttribution: HaloFX as a volunteer commented

Thanks for the reply. I understand where you are coming from. I have rolled back to the 1.x branch for now, and will have a look at the other modules you mention. Luckily the site in question is an internal site, and the module combination was more about keeping admins from making mistakes, than it was about security.