Boxes was first introduced to me as a solution for when you want a site editor to be able to edit custom blocks, but not grant them access to the Blocks administration screen where they can do untold damage to the site. Seemed to work great, but then I read http://drupal.org/node/859750 and realized it was just a bug, and that boxes also uses the core 'administer blocks' permission, so it's no more granular.

Wondering if it's feasible to have a separate 'administer boxes' or 'edit box content' permission, so site editors can edit box content in-place, but not have access to admin/build/blocks.

CommentFileSizeAuthor
#4 0001-Backport-'administer-boxes'-and-'edit-boxes'-permission-from-D7-branch.patch3.76 KBunivate
#1 boxes.878082.patch864 bytesGrayside

Comments

Grayside’s picture

Grayside commented
Status: Active » Needs review
StatusFileSize
new boxes.878082.patch864 bytes

Attached a patch to get the ball rolling. *Did not test it*. Adds "edit box content" permission.

cwithout’s picture

cwithout commented

+1 on this request. Tested the patch. No issues seen so far.

tirdadc’s picture

tirdadc commented
Assigned: Unassigned » tirdadc

The 7.x version provides two permissions ('administer boxes' and 'edit boxes') which it uses instead of 'administer blocks'. I think I will backport those to 6.x those to insure some consistence.

univate’s picture

univate commented
StatusFileSize
new 0001-Backport-'administer-boxes'-and-'edit-boxes'-permission-from-D7-branch.patch3.76 KB

I have backported these permissions from the D7 branch.

cwithout’s picture

cwithout commented
Version: 6.x-1.0-beta10 » 6.x-1.1
Status: Needs review » Needs work

hook_permission() is hook_perm() is D6.

When I tried it with that change, if the user only had permission to "edit boxes" and not "administer boxes", the ajax didn't work.

Otherwise, it worked.

Since current D6 users with permission to "administer blocks" also have permission to administer boxes, it would probably be best to either continue to allow users with "administer blocks" to administer boxes or to use hook_update_N to display a warning message letting people know they'll need to modify the permissions. And/or automatically assign the "administer boxes" and "edit boxes" permission to any user that has "administer blocks" on update.

Otherwise, on upgrade, users who could previously administer the boxes would suddenly not be able to.