View Issue Details

IDProjectCategoryView StatusLast Update
1791Composrcore_permission_managementpublic2022-08-15 15:23
ReporterChris Graham Assigned ToGuest  
PrioritynormalSeverityfeature 
Status newResolutionopen 
Summary1791: Split up assume_any_member/member_maintenance privileges
DescriptionThese privileges conflate quite a few things. It's fine for most sites, but when you need granular control of user accounts in corporate environments of many teams, it isn't good enough.

Specifically...

(This is organised as <General task> >> <new privilege> >> <filename(s) needing changing>)

Need individualised privileges for what was assume_any_member(+enforce_personal_access)
 change_any_group_memberships
  admin_cns_join
  cns_members_action2
  settings
 manage_any_ecommerce_history
  invoices
  shopping
  subscriptions
  classifieds
 delete_any_account
  delete
 view_personal_calendar
  calendar
 view_member_warnings
  warnings
 view_member_files
  filedump
Mention that assume_any_member includes changing password
Stop using assume_any_member as a secondary route to where member_maintenance also allows the same access (unnecessary complexity - just let admin grant additional privileges if needed, doing so wouldn't hurt anything)
Need individualised privileges for what was member_maintenance
 edit_any_member
  admin_cns_join
  all the member setting hooks
 reveal_email_addresses
  members
  CNS_MEMBER_PROFILE_ABOUT
  cns_members_action2
 ban_member
  warnings
  cns_members_action2
 provide_minor_member_perks
  settings
  cns_members_action2
 validate_any_member
  settings
  cns_members_action2
Get rid of member_maintenance privilege entirely
TagsRoadmap: Over the horizon (partial implementation)
Attach Tags
Time estimation (hours)3
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Relationships

related to 105 Not AssignedGuest Remove concept of a forum moderator 

Activities

There are no notes attached to this issue.

Add Note

View Status
Note
Upload Files
Maximum size: 32,768 KiB

Attach files by dragging & dropping, selecting or pasting them.
You are not logged in You are not logged in. This means you will not get any e-mail notifications. And if you reply, we will not know for sure you are the original poster of the issue.

Issue History

Date Modified Username Field Change
2022-08-15 02:06 Chris Graham Tag Attached: Roadmap: v12
2022-08-15 02:07 Chris Graham Relationship added related to 105
2022-08-15 15:23 Chris Graham Tag Attached: Roadmap: v12 partial implementation
2022-08-15 15:23 Chris Graham Tag Detached: Roadmap: v12
2024-03-26 00:58 PDStig Tag Renamed Roadmap: v12 partial implementation => Roadmap: Over the horizon (partial implementation)