Problem/Motivation

Some permission descriptions don't add any/much information or really clarify anything beyond the name of the permission.

Proposed resolution

Figure out which permission descriptions are redundant, and remove them.

Remaining tasks

a) Make a list of descriptions to be removed. [see UI changes section below]

b) Remove them in a patch.

User interface changes

Less useless text on the Permissions page. Here's a list of redundant permission descriptions to be removed:

Content Translation
Administer translation settings
Configure translatability of entities and fields.

Contextual Links
Use contextual links
Use contextual links to perform actions related to elements on a page.

File
Access the Files overview page
Get an overview of all files.

Image
Administer image styles
Create and modify styles for generating image modifications such as thumbnails.

Node
Access the Content overview page
Get an overview of all content.

Tour
Access tour
View tour tips.
[Note: this one should probably say "Access tours" as the main permission name?]

API changes

None.

Data model changes

None.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

joachim’s picture

Status: Active » Needs review
FileSize
1.73 KB
Dries’s picture

This looks like an improvement to me, but I'm not a native English.

coderintherye’s picture

Status: Needs review » Needs work

Just want to add an opinion that I don't find 'the user' or 'oneself' to be helpful in explaining that permission. Oneself is also a rarely used word at least in the U.S. (for further proof of that Google 'oneself', 16 million hits, to Google 'yourself' 326 million hits), Unfortunately, I don't have much to add as it is a hard phrase to word. Perhaps

'Allows a user to view unpublished content that they created'

Hopefully, some more opinions will chime in.

joachim’s picture

The thing is to keep the grammatical point of view consistent down the entire permissions list.

We have already: "View, edit and delete all site content. Users with this permission will bypass any content-related access control."
So I guess the pattern here is that the description text has an implied "Users with this permission may:" before it.

In which case, we can make that part explicit to be clear:

"Users with this permission may view unpublished content they have created."

We can now bikeshed about use of the singular 'they' ;)

I actually think on looking down it that the whole list of permissions could do with a grammar pedant to go over it.
Things like this:

Select method for cancelling own account
Select the method for cancelling own user account. Warning: Give to trusted roles only; this permission has security implications.

Merely repeating the UI does not make good user documentation!

coderintherye’s picture

Status: Needs work » Needs review

Well as far as I am concerned, I liked your wording and think it betters conveys the message for this particular aspect.

Users with this permission may view unpublished content they have created

So as for this particular issue, marking it to needs review and I think if we were to want to change grammar in multiple places then we would want to open another issue that is more encompassing?

joachim’s picture

Yes, absolutely -- that would be for another issue.

Here's a new patch.
I'm not entirely sure about the bumpy pattern we now get for the node permissions description :/

Dries’s picture

I'm not 100% convinced about this change. We never start the description with "Users with this permission ...".

joachim’s picture

Yeah, I'm not convinced either for the same reason.

But if permission descriptions are going to be sentences without subjects, we're going to end up with constructions that use 'oneself' ...

cwgordon7’s picture

It's also generally grammatically preferable to have a clear subject in the clause - "May view unpublished content they have created" only makes sense if the individual user is singled out as the subject. It might be worth considering changing all of our permissions' descriptions to use the "Users with this permission..." pattern.

coderintherye’s picture

+1 to #9.

The only alternative I see is wording the permissions for unpublished content like how the View Unpublished module does it, with either "edit all unpublished content" or "edit unpublished x content" where x is the content type.

joachim’s picture

I think we need a revisit of all permission description texts.

I've just spotted this gem:

Administer actions
Manage the actions defined for your site.

(Yeah. Cos that gives me more information!)

jhodgdon’s picture

Hmmm...

OK, we're looking at things like:

View own unpublished content
View unpublished content created by the user

I agree, the current text doesn't make sense... What we need to do is decide whether the permission descriptions are implying a "You can..." start, or a "Users with this role can...", or if they are meant to be commands (which I don't think is accurate). My feeling is that the implied text is "Users with this role can...". We could make this explicit by putting that text at the top of the page. Then we could change this to:

"View unpublished content they created".

Thoughts?

Anyway, permission descriptions with "the user" aside, I reviewed the other permission texts and found a few that I think need some attention:

Administer nodes
Manage all information associated with site content, such as author, publication date and current revision. Warning: Give to trusted roles only; this permission has security implications.
(should also say that it gives you permission to edit the content as well)

Create URL aliases
Manage URL aliases on content.
(on? Maybe should be "for"?)

Cancel own vote
Retract and optionally change own votes.

Inspect all votes
View voting results.
(I think everyone can see the aggregate voting results, so this probably should say that you can view individual-voter-level results?)

Administer shortcuts
Manage all shortcut and shortcut sets.
(should be "all shortcuts")

Administer software updates
Run the update.php script.
(Is that really all this permission does, and should the description explain what the update.php script does?)

Access contextual links
Use contextual links to perform actions related to elements on a page.
(Doesn't this permission actually display the links?)

Access administration toolbar
Access the persistent administration toolbar displayed on all pages.
(I think most of the "access" permissions say "view" in their description?)

Select method for cancelling own account
Select the method for cancelling own user account. Warning: Give to trusted roles only; this permission has security implications.
(spelling error: canceling is the correct spelling)

jhodgdon’s picture

Status: Needs review » Needs work
joachim’s picture

Status: Needs work » Closed (fixed)

I've just updated CVS and the large majority of permission descriptions have been removed.
Apart from one or two cases, the descriptions are by and large warnings about security implications or clarifications (eg that the cancel account permission means different thing depending on what the settings for that are).

So I think we can close this.

jhodgdon’s picture

Status: Closed (fixed) » Active

Reopening. There are still a couple of descriptions that should be removed, as they don't add any/much information or really clarify anything:

(contextual module)
Use contextual links
Use contextual links to perform actions related to elements on a page.

(image module)
Administer image styles
Create and modify styles for generating image modifications such as thumbnails.

Also, it would have been nicer to have marked this as "fixed" rather than "closed" so it would still show up in issue queues for a while, so those of us following this issue could have noticed. :)

Tor Arne Thune’s picture

Title: odd grammar in user permissions » Useless description for some permissions
Version: 7.x-dev » 8.x-dev
Component: node.module » user interface text

Still a valid issue as per post #15.

jhedstrom’s picture

Issue summary: View changes
Issue tags: +Needs issue summary update

And still valid per #15 :)

no_angel’s picture

Assigned: Unassigned » no_angel
no_angel’s picture

no_angel’s picture

Assigned: no_angel » Unassigned
Status: Active » Needs review
Issue tags: -Needs issue summary update +Needs Review

- Needs issue summary update
+ Needs Review

patch to remove unnecessary permissions descriptions.

jhodgdon’s picture

Issue summary: View changes
Status: Needs review » Needs work
Issue tags: -Needs Review

Hm... this patch has an extra file in it by mistake. Oops!

And also let's see if it is complete. I think the two items in this patch (and issue summary) were just examples of permission descriptions that add no useful information, not necessarily a comprehensive list.

So... I started up a simplytest.me and enabled all of the Core modules (aside from three that are marked "Experimental"). I'm adding a few additional suggestions of text that is redundant to the issue summary, and clarifying it in general. So I think we can do more than just these two in the patch.

no_angel’s picture

Assigned: Unassigned » no_angel
no_angel’s picture

new patch to remove / revise as per list below:

------------------------------------------------------------------

Question: should the 'Review' revisions have a 'to' view...?

For node > content type > Delete revisions > Role requires permission to view revisions and delete rights for nodes in question, or administer nodes.
For node > content type > Review revisions > Role requires permission view revisions and edit rights for nodes in question, or administer nodes.nodes.

no_angel’s picture

Assigned: no_angel » Unassigned
Status: Needs work » Needs review
Issue tags: +Needs Review

Status: Needs review » Needs work
jhodgdon’s picture

Thanks for the patch!

+++ b/core/modules/content_translation/content_translation.permissions.yml
@@ -1,7 +1,6 @@
-create content translations:
+  create content translations:

This indentation change is causing the test failures.

Also, please do not post stuff like #24 in comments -- git transcripts and the output of your shell scripts are not something we need to read. Thanks!

Because of all the noise in your comment, I almost didn't see your questions... And the answer is yes, I think the word "to" should be added to those permission descriptions that you suggested at the bottom of #24. Thanks for noticing that!

no_angel’s picture

19 modules have been enabled: Actions, Activity Tracker, Aggregator, Ban, Book, Forum, Responsive Image, Statistics, Syslog, Testing, Telephone, Configuration Translation, Content Translation, Interface Translation, Language, HAL, HTTP Basic Authentication, RESTful Web Services, Serialization.

jhodgdon’s picture

Um. Which patch did you want to attach here? Please attach 1 patch and 1 interdiff file and set status to Needs Review. Thanks!

no_angel’s picture

no_angel’s picture

Sorry for the delay.

I've attached a revised patch and interdiff.

Thanks for your patience!

jhodgdon’s picture

Version: 8.0.x-dev » 8.1.x-dev
Issue tags: +Needs usability review, +Usability

Thanks! I think this is all very good now.

I am moving the component to 8.1.x, because this changes translatable strings, and I don't think it's enough of a major bug to warrant invalidating translations in 8.0.x.

Also tagging with Usability so that hopefully the usability team will review it. As such I am not marking it RTBC myself.

yoroy’s picture

Issue tags: -Needs usability review
+++ b/core/modules/node/node.permissions.yml
@@ -21,7 +20,7 @@ view all revisions:
+  description: 'Role requires permission to <em>view revisions</em> and <em>edit rights</em> for nodes in question or <em>administer nodes</em>.'

+++ b/core/modules/node/src/NodePermissions.php
@@ -70,7 +70,7 @@ protected function buildPermissions(NodeType $type) {
+        'description' => $this->t('Role requires permission to <em>view revisions</em> and <em>edit rights</em> for nodes in question, or <em>administer nodes</em>.'),
...
       "delete $type_id revisions" => array(

I don't really understand what these two descriptions are trying to tell me. Is this to say which other permissions are needed to be able to use this one? This is already a problem with the original strings so not necessarily something to fix here.

All the bits that get removed with this patch look good to me!

jhodgdon’s picture

Status: Needs review » Needs work

Good point! However, I think that this is out of scope for this issue and we should in this patch, just take out the minor changes to these permission descriptions , because this issue is about removing "useless descriptions", not fixing incorrect descriptions. So filed
#2678178: Node revision revert/delete permission descriptions are wrong
to deal with the broken descriptions for revision revert/delete.

So can we have an updated patch here that doesn't make the (currently very minor and out of scope) changes to the descriptions for revision revert/delete permissions? Thanks!

Version: 8.1.x-dev » 8.2.x-dev

Drupal 8.1.0-beta1 was released on March 2, 2016, which means new developments and disruptive changes should now be targeted against the 8.2.x-dev branch. For more information see the Drupal 8 minor version schedule and the Allowed changes during the Drupal 8 release cycle.

yoroy’s picture

Issue tags: +ux-interfacetext
dagmar’s picture

So can we have an updated patch here that doesn't make the (currently very minor and out of scope) changes to the descriptions for revision revert/delete permissions?

I think this should address this.

jhodgdon’s picture

Status: Needs review » Reviewed & tested by the community

Looks good, thanks!

xjm’s picture

This looks great!

+++ b/core/modules/image/image.permissions.yml
@@ -1,3 +1,2 @@
   title: 'Administer image styles'
-  description: 'Create and modify styles for generating image modifications such as thumbnails.'

This is the only description in here that adds any useful information: in this case, that a "thumbnail" is an example of an image style. Is that a concern? Bumping back to NR to double-check that.

The rest of the patch looks good to me.

xjm’s picture

Status: Reviewed & tested by the community » Needs review
jhodgdon’s picture

Issue tags: +Needs usability review

yoroy already OK'd removal of the above in #33, but I'll tag this with "needs usability review" again if you think it deserves another look.

yoroy’s picture

Issue tags: -Needs usability review

Good nitpick :-) The description on /admin/config reads "Configure styles that can be used for resizing or adjusting images on display." So what image styles do is explained elsewhere, in a place closer to the functionality itself. Since this is one permission for the whole of the image styles feature (instead of one-of-multiple like for Field UI or Configuration manager which have to be more specific to tell them apart) I think it's ok to remove the explanation here.

jhodgdon’s picture

Status: Needs review » Reviewed & tested by the community

Thanks for the usability review! Then in that case, this is RTBC again, since I think that was the only question.

alexpott’s picture

Title: Useless description for some permissions » Remove redundant description for some permissions
Status: Reviewed & tested by the community » Fixed
Issue tags: +String change in 8.2.0

Committed 6e69b56 and pushed to 8.2.x. Thanks!

+++ b/core/modules/tour/tour.permissions.yml
@@ -1,3 +1,2 @@
-  title: 'Access tour'
...
+  title: 'Access tours'

This is a translated string change - so this can only go in 8.2.x

Updated the title to be more informative and less harsh.

  • alexpott committed cf1a9f8 on 8.2.x
    Issue #576296 by no_angel, joachim, dagmar, jhodgdon, coderintherye,...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.