Additional permissions for profiles [#124271]

There are 4 types of fields that can be created but only 2 types of access. The user module access should allow for more types of access levels.

You may want someone to be able to view what is Private, but not edit the profiles. Or be able to edit everything but see/edit what is hidden. The profile gives options but the user access it's all or nothing. They should be more equal.

Comments

Comment #1

Crell commented 3 March 2007 at 07:53

Version:

5.1

» 6.x-dev

I don't actually follow what you're saying. 4 types of fields where but 2 types of access what? There are an unlimited number of roles the system supports. What do you mean private but not profiles?

It's hard to address a feature request when I can't even comprehend what it is you're saying. Speaking of, Drupal 5 is frozen. Feature requests go against Drupa 6.x.

Comment #2

uNeedStuff commented 3 March 2007 at 09:30

Sorry, missing the starting sentence and could have been more descriptive.

When adding fields to the User Profile:
There are four types of fields that can be created (Public, Public not in user list, Private, Hidden), however there are only 2 levels of settings in the Access Control user module.

You can somewhat control who can see what is in the actual profile (Public, not in user list), but there is only a single access setting (Administer User) for both Hidden & Private.

If your using the Hidden for something completely administrative, there is no way to allow access to Private & edit ability without also allowing access to what is hidden.

If there are 4 levels of viewing type, there should be 4 levels to control access.

You can control the User List & Profile viewing by having the menu item available to anyone registered and not allowing access to the profile. That covers the 1st two, Public & Public (not in user list).

So to me there needs to be an additional level of access to allow anyone to see the Hidden values. I'm not sure what I would use the field for from what I understand about it, other then it's something that I don't want users to see. However if I didn't want people to see the field I also wouldn't want admins who were helping me with the day to day running of the site to see whatever I was keeping hidden.

I'd also like to allow someone access to see what is marked as private without being able to edit it. Phone numbers are a perfect example, all the site managers should be able to access this information, but they don't need to be able to edit a user profile. I guess I'm thinking how you can address access to nodes; access, create, edit own, edit others, view revisions, revert revisions. With the user profile information you have basically two choices, access & edit, so your either giving Full access or very limited access.

Sorry for the confusion, I hope I clarified it.