✔ Problems with permissions for admin users
Completed by Morgan M.
- Assigned to
-
Anil V.
Ryan K.
- Notes
-
Further to the video below, there are two problems with admin permissions:
- Admin users can be created without any permissions. Why would we ever create an admin user that can't do anything on the admin site?
- When an admin user's permissions are restricted, they can still view restricted aspects of the admin site. When permissions are revoked, those aspects of the site should be suppressed, and not visible to the admin user.
1. We have done some changes in user module so that user cannot be saved without a permission. At least one permission is required.
2. Can you provide me a checklist for roles vs modules. E.g. which user role should have access to which module?
I'll provide more details roles vs. modules as I get more in-depth with the test this week.
Morgan