Power User Privileges

PatriaCo
PatriaCo
@the-patria-company
8 years ago
349 posts
Due to some power user settings, if a linked profile owner is not able to create a certain quota type, but is linked to a profile to help administrate it, they can make a change in the Profile Settings and accidentally change the quota type.

Example:
Power User - with ability to create Quotas A & B is given permission (linked owner) to a profile set up as Quota type C. If this power user enters the Profile Settings the quota type C will not be available and will be changed to A by default, once any other change is saved in the Profile Settings Tab.

It should be noted that Quota type C is fully loaded and we do not want power users to be able to create them at will. They can purchase this profile quota type and we will link their personal power user account to this special profile (for the convenience of a single sign on administration).

How can the accidental quota change be avoided?

Thanks!


--
The Patria Company - patriaco.com / quality-trades.com / a-t.life - doing Jamroom since v3

updated by @the-patria-company: 03/11/17 03:07:40PM
brian
@brian
8 years ago
10,148 posts
If you have users that are "helping administer" profiles, they need to be profile admins. When a user is a Power User they only have access to the quotas you allow - that's the way it is designed.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
PatriaCo
PatriaCo
@the-patria-company
8 years ago
349 posts
I understand and that is the issue. They are not helping to administer profile"s". They are only helping or being assigned to one. I don't want them to have profile admin rights to all profiles. I am wondering if there is a way to maybe hide the profile settings menu item and gear for these "profile helpers"?


--
The Patria Company - patriaco.com / quality-trades.com / a-t.life - doing Jamroom since v3
brian
@brian
8 years ago
10,148 posts
PatriaCo:
I understand and that is the issue. They are not helping to administer profile"s". They are only helping or being assigned to one. I don't want them to have profile admin rights to all profiles. I am wondering if there is a way to maybe hide the profile settings menu item and gear for these "profile helpers"?

You would have to do something custom in the profile_header.tpl file - there's nothing I can think of that is going to make it easy though - you'll have to check for specific quota_id OR user_id.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
PatriaCo
PatriaCo
@the-patria-company
8 years ago
349 posts
Brain Storm: it would be cool to have an "Admin/Moderator Permissions" Module. That would allow us to manually assign rules for our Profile Admins (or even normal users) by quota id or by user id.

Not sure if you have any other JR site owners that have requested more privilege controls, but I would be very interested in helping out on such a module.

Thanks!


--
The Patria Company - patriaco.com / quality-trades.com / a-t.life - doing Jamroom since v3
brian
@brian
8 years ago
10,148 posts
The problem here isn't one of permissions - you've specifically set a profile to a quota_id that the profile owner doesn't have access to as a Power User. There is A LOT of code in Jamroom to prevent this type of thing from happening otherwise users could "game" a system that might be offering PAID subscriptions, etc.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Tags