It would be great if the default space wouldn't resort to the 'administer site configuration' for checking access to the administration page, as the permission grants too many rights. I guess it would be ok to introduce a new permission.

Sadly, I don't know how to create a proper patch (yet). Here the small change for everyone who needs it:

Line 467: return user_access('administer default space', $account);
Line 765: return array('administer spaces', 'administer default space');

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

amstel’s picture

I had this problem as well. Users were unable to manage features of their own space without granting them the global 'administer site configuration'. I tried using the OG User Roles module to grant this permission only for their spaces, but it didn't worked out. The solution was to use the permission change above with an organic group admin check:

Line 461 of spaces.module version 3.4

function spaces_access_admin($account = NULL, $space = NULL) {
  $space = isset($space) ? $space : spaces_get_space();
  if ($space) {
	 return $space->access_admin($account);
  }
  // addedd to allow group admins to customize features
  $group = og_get_group_context();
  if (og_is_group_admin($group, $account)) {
    	return TRUE;
  }

  return user_access('administer site configuration', $account);
}
jeffschuler’s picture

Version: 6.x-3.0 » 7.x-3.x-dev
Issue summary: View changes
Status: Active » Needs review
FileSize
767 bytes

I had the same issue. I needed to allow a user to administer spaces-based features in the site at-large, (not in any space,) but I couldn't give them the administer site configuration permission.

Here's a patch for 7.x-3.x-dev.