Patch forthcoming to port the "exclude arbitrary permissions" functionality to D7.

CommentFileSizeAuthor
#2 adminrole-exclude-permissions-D7-2644162-2.patch1.19 KBLanny Heidbreder
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

75th Trombone created an issue. See original summary.

Lanny Heidbreder’s picture

Lanny Heidbreder CreditAttribution: Lanny Heidbreder at Stone Ward commented
FileSize
adminrole-exclude-permissions-D7-2644162-2.patch1.19 KB

Patch attached. My use case specifically requires setting the variable manually in settings.php, so I didn't port the UI. Someone else is welcome to, of course.

alison’s picture

alison
she/her
CreditAttribution: alison as a volunteer commented

Thanks, 75th Trombone. Just piping up to say it would be super groovy if someone had the time to port the UI functionality from the D6 patch :) (And maybe even get it rolled into the module!)

NancyDru’s picture

NancyDru
she/her/hers
Primary language English
Location Boston
CreditAttribution: NancyDru commented

I don't see this in the 6.x branch. Where do you see it? And what is its benefit?

Ah, I see it's #447940: Add ability to exclude arbitrary permissions.

liquidcms’s picture

liquidcms CreditAttribution: liquidcms commented
Status: Active » Closed (works as designed)

Sorry, i don't get the value in this. Admin role is meant to give the same access as uid=1 to a role. Excluding some perms defeats the purpose of this. If you want some special role; why not make one?

I am not the maintainer of the project; just the person who did the port to D7. I would not commit this patch; but if the maintainer wants to he can.

Lanny Heidbreder’s picture

Lanny Heidbreder CreditAttribution: Lanny Heidbreder commented

The value is that any new permissions that are added by modules (or automatically created e.g. by node bundle creation) will be automatically added to the specified role. If we just create a new role as you suggest, we have to check it every time we change anything significant for the remaining life of the site. This is the entire pain-in-the-butt that the "admin role" concept is meant to address.