In our application, we need to limit who can grant access to a role and who can grant access to a user. Limiting the ability to grant access by role/permission is fine for us.

CommentFileSizeAuthor
#1 permissions-1095040-2.patch3.42 KBmjoyce

Comments

mjoyce’s picture

mjoyce commented
StatusFileSize
new permissions-1095040-2.patch3.42 KB

This is a first go at implementing the request. Comments are welcome.

salvis’s picture

salvis
he/his
commented

The new permissions overlap the existing ones. It seems that you need at least one of each to be able to do anything with CA.

The update path is missing. IOW, if you install this, then no one besides user 1 will be able to access the CA admin pages anymore.

good_man’s picture

good_man commented

I can tell also that this is an extreme case, because if you trust a user to grant other users, it's the same as trusting him for granting roles too.

salvis’s picture

salvis
he/his
commented

Maybe you want to keep your deputy from messing with roles, or maybe you need ACL for some other reason but you don't want CA's by-user controls...

gisle’s picture

gisle
he/him
Primary language Norwegian Bokmål
Location Norway
commented
Issue summary: View changes
Status: Active » Closed (outdated)