This module aims to allow "non-admin" Roles (ie: Roles that does not have the administer permissions permission) to manage and delegate permissions for "lower" Roles.
The role hierarchy (that's why we use the lower/higher terminology) is taken from the Core roles weight configuration.
So higher (more permissive) roles would be able to handle permissions to lower (less permissive) roles.
You might benefit to use this module in projects that have a defined role hierarchy structure, and the need of handling permissions only by some of those roles. Avoiding the use of the too-broad and sometimes risky administer permissions permission provided by the User Core module.
In summary, this module provides a more restricted way to delegate permissions.
NOTE: The module restricts the "delegable" permissions to the ones that the current user Role has, in this way the "higher" role user won't be able to grant permissions that they do not have.
See the README file for instructions on How to Configure and How to Use.
Supporting organizations:
Project information
- Project categories: Access control, Administration tools
- Ecosystem: Role Delegation, Role hierarchy
6 sites report using this module- Created by anairamzap on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
