user who is manager of a role cannot add any user to it
The user doesn't have any other permission in authentic, the "add user" line is correctly displayed on the role page but the select2 dropdown doesn't work (it gets a "Forbidden" error code).
a2_rbac: allow specifying extra permissions when building an admin role (#7759)
#1 Updated by Benjamin Dauvergne over 4 years ago
If the user does not have also
custom_user.view_user permissions on at least one organizational unit, he will see no user to add. I can completely remove the check, but our user database will be public in this case. Maybe I could make view_role imply view_user.
#4 Updated by Benjamin Dauvergne over 4 years ago
This patch gives user view permission to all role administration roles.
#5 Updated by Benjamin Dauvergne over 4 years ago
Frédéric Péters a écrit :
So after the user is created I have to move it from "no entity" to "entity by default", and it would work?
Not at all, it's not related to entities, it's just that I can give a restrictive or large view of users so the Clapiers administrator of role "État-civil" would see all users (even those of Vendargues) or only users of Clapiers. I choose for now to give him a view of all users.
#7 Updated by Benjamin Dauvergne over 4 years ago
- Status changed from Nouveau to Résolu (à déployer)
- % Done changed from 0 to 100
Appliqué par commit authentic2|ff6ca45868701e10e4780260d52466d87c8f27b0.