"SuperUser" - howto?

Next topic

Author	Message
Torbjørn Laukvik	Wednesday 27 April 2005 7:47:00 am Ok, I am sure this has been asked before, so I am very sorry for bothering all of you again.... I want to make a user that has almost exactly the same rights as editor user, EXCEPT that he can create other users within the editor user group. (The editor user can create/delete content at will from inside the admin part) Do you understand? he should under noooo circumstances be allowed to create admin users or modify the anon users. I am using 3.5.1 and switching to 3.5.2 soon. (in case there is some groundbreaking differences in 3.5.2) Thanks
Bård Farstad	Wednesday 27 April 2005 7:49:59 am Torbjørn, this can easily be achieved by setting permissions on editing. You can limit editing/creating of users to a specific subtree. E.g. /user/editor users/. That way users who have rights like this can add and edit other users in that specific place, but nowhere else. Hope this answered your question. --bård Documentation: http://ez.no/doc
Torbjørn Laukvik	Wednesday 27 April 2005 8:05:25 am It sounds easy, but I'm not quite sure how to attack this. Have created a new role "superuser" the problem I'm facing right now is that if I try to add a new user policy for the "superuser" role, it's given no limitation all the time. Is this right? doesn't this mean that if I give someone user access, they can all create admins? I have of course added a user group with some users in it. Am I attacking this from the wrong angle?

Author

Message

Wednesday 27 April 2005 7:47:00 am

Ok, I am sure this has been asked before, so I am very sorry for bothering all of you again....

I want to make a user that has almost exactly the same rights as editor user, EXCEPT that he can create other users within the editor user group.
(The editor user can create/delete content at will from inside the admin part)

Do you understand? he should under noooo circumstances be allowed to create admin users or modify the anon users.

I am using 3.5.1 and switching to 3.5.2 soon. (in case there is some groundbreaking differences in 3.5.2)

Thanks

Bård Farstad

Wednesday 27 April 2005 7:49:59 am

Torbjørn,

this can easily be achieved by setting permissions on editing. You can limit editing/creating of users to a specific subtree. E.g. /user/editor users/. That way users who have rights like this can add and edit other users in that specific place, but nowhere else.

Hope this answered your question.

--bård

Documentation: http://ez.no/doc

Torbjørn Laukvik

Wednesday 27 April 2005 8:05:25 am

It sounds easy, but I'm not quite sure how to attack this.

Have created a new role "superuser"
the problem I'm facing right now is that if I try to add a new user policy for the "superuser" role, it's given no limitation all the time. Is this right? doesn't this mean that if I give someone user access, they can all create admins?

I have of course added a user group with some users in it.

Am I attacking this from the wrong angle?

eZ debug

Timing:	Jan 19 2025 01:06:44
Script start
Timing:	Jan 19 2025 01:06:44
Module start 'layout'
Timing:	Jan 19 2025 01:06:44
Module start 'content'
Timing:	Jan 19 2025 01:06:45
Module end 'content'
Timing:	Jan 19 2025 01:06:45
Script end

Main resources:

Total runtime	0.6963 sec
Peak memory usage	4,096.0000 KB
Database Queries	57

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0052	589.0313	152.6094
Module start 'layout'	0.0052	0.0026	741.6406	39.4297
Module start 'content'	0.0078	0.6870	781.0703	532.8359
Module end 'content'	0.6949	0.0014	1,313.9063	12.1875
Script end	0.6963		1,326.0938

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0030	0.4377	16	0.0002
Check MTime	0.0012	0.1761	16	0.0001
Mysql Total
Database connection	0.0010	0.1456	1	0.0010
Mysqli_queries	0.6505	93.4210	57	0.0114
Looping result	0.0007	0.1008	55	0.0000
Template Total	0.6659	95.6	2	0.3329
Template load	0.0020	0.2862	2	0.0010
Template processing	0.6639	95.3390	2	0.3319
Template load and register function	0.0003	0.0442	1	0.0003
states
state_id_array	0.0008	0.1079	1	0.0008
state_identifier_array	0.0009	0.1290	2	0.0004
Override
Cache load	0.0016	0.2326	21	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0005	0.0744	2	0.0003
Fetch class attribute name	0.0019	0.2733	4	0.0005
XML
Image XML parsing	0.0007	0.0969	2	0.0003
class_abstraction
Instantiating content class attribute	0.0000	0.0020	4	0.0000
General
dbfile	0.0007	0.0946	17	0.0000
String conversion	0.0000	0.0007	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
3	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
5	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
2	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
1	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 13 Number of unique templates used: 6

Time used to render debug report: 0.0001 secs