Closed (duplicate)
Project:
Drupal core
Version:
x.y.z
Component:
book.module
Priority:
Normal
Category:
Feature request
Assigned:
Reporter:
Created:
2 Jun 2004 at 23:39 UTC
Updated:
25 Jan 2006 at 06:59 UTC
in order to create a new book, the user currently must have 'administer nodes' permission. this is a bit too broad. this patch introduces a 'create books' permission and improves the help text a bit.
| Comment | File | Size | Author |
|---|---|---|---|
| drbook.patch | 1.39 KB | moshe weitzman |
Comments
Comment #1
moshe weitzman commentedComment #2
moshe weitzman commentedComment #3
moshe weitzman commentedthis patch is old now, with new menu system. functionality still needed.
Comment #4
moshe weitzman commentedUpdated patch. It is far less risky to grant 'create new book' as opposed to 'administer nodes'.
Comment #5
nedjo+1, this makes sense as a distinct permission. Should the permission test however be
if (user_access('create books') || user_access('administer nodes')) {, instead ofif (user_access('administer nodes')) {, on the assumption that 'administer nodes' includes creating books?Comment #6
killes@www.drop.org commentedMakes sense to me, but the patch is outdated.
Comment #7
killes@www.drop.org commentedmaybe somebody wants to look at it again.
Comment #8
merlinofchaos commentedShould this permission be 'create new books' or simply 'administer books' or should they be separated out? I ask because if someone's going to work on this, it seems like a good idea to simply back away from administer node privileges entirely.
The question that remains, to me, is whether or not there is any real gain by having create new books as its own permission.
Comment #9
puregin commentedThe entire issue of permissions for book module needs to be re-examined. See also http://drupal.org/node/21559.
In the meantime, I believe that 'administer books' and 'create new books' should be kept distinct.
Administer books, for example, implies permissions to delete other user's book pages. I can think of many situations where one might want a user to be able to create new books, but not mess up other peoples' books.
Djun
Comment #10
Crell commentedTo be honest, I don't like the whole "administer XYZ" permission format in the first place. What the heck does "administer" mean, anyway? Create? Edit Own? Edit Others? Delete Own? Delete Others? That's five different possible operations. Which of them does "Administer" cover? I honestly have no idea. :-)
Finer-grain permissions for those five operations would from a UI perspective be much much better, simply because they are easier to understand. (That goes for books and for everything else.)
Comment #11
Stormy-1 commentedIs there an updated verssion of this create a book patch? I am creating a writers site and need them to be able to create their own books. Thanks.
Comment #12
moshe weitzman commentedhttp://drupal.org/node/45895