The annotator module's annotation access permissions (view annotations, edit any annotations, edit own annotation) are always shown in the permissions settings page (/admin/people/permissions). But they are only effective after enabling the Permissions plugin at /admin/config/content/annotator.
Since this is not obvious, it makes one wonder initially why the module permissions are not working to prevent users form seeing and editing any other annotation.
Proposals how this could be improved:
- Show the module permissions only once the Permissions plugin has been enabled. (But Drupal might not support this.)
- Alternatively, add to the descriptions of the relevant permissions on the
/admin/people/permissionspage that they will only work after enabling the Permissions plugin. - Alternatively and perhaps cleanest, merge the Permissions plugin's code into the main Drupal annotator code, always loading the Annotator JS permissions plugin. Granting all permissions to all roles then has the same effect as disenabling the Permissions plugin has now.
Comments
Comment #1
sanduhrsGood suggestion for an improvement.
I'd go with #3.