Skip to content
  1. Feb 20, 2017
  2. Feb 19, 2017
  3. Jan 30, 2017
  4. Nov 18, 2016
  5. Nov 11, 2016
  6. Jul 27, 2016
    • AdamPS's avatar
      - Add a default view · 572f1bf8
      AdamPS authored
      - Expose read-only access to some more fields
      - Hide rows in view where there is no edit access
      - Fix line endings
      572f1bf8
  7. Jul 18, 2016
  8. Jun 10, 2016
  9. Apr 30, 2016
  10. Feb 01, 2016
  11. Jul 29, 2015
  12. Jul 22, 2015
  13. Jun 24, 2015
  14. Nov 25, 2014
  15. Nov 23, 2014
  16. Nov 22, 2014
    • AdamPS's avatar
      Batch of changes for beta2 release · 34b11167
      AdamPS authored
      There are too many interlocking changes to commit each one separately.
      
      1) Permissions (administerusersbyrole_permission)
      
          Drop the "and other roles" permissions as per #2379013: "XX and other roles" permission can give admin access by accident.
          Internal permissions names use role ID not role name (user visible permission titles are unaltered). This fixes several problems. Title can be translated; title can change; title can contain special characters, which are stripped, but then two different roles could collide.
          For simplicity and efficiency, no need to have special case for "no custom roles" - we can just use role ID DRUPAL_AUTHENTICATED_RID. (Except we do special case the title to help users.)
          Now we are no longer relying on 'administer users' permission, we need a base permission that enables the function of this module (e.g. to govern access to admin/people). The neatest solution seems to be to use the "no custom roles" permissions. Hence there is a small change to the meaning of these permissions: to edit a user requires "edit users with no custom roles" plus the specific permission per role of the user.
          Pointless to have a permission for anonymous user.
      
      2) Menus (hook_menu_alter).
      
          Add permission hook to view user to ensure that blocked users are visible when we have permission to edit them.
          Add permission hook to allow creation of users based on permissions.
          Add permission hook for admin/people for users that have some edit or cancel permissions.
      
      3) Calculation of access (_administerusersbyrole_can_*)
      
          Always start by calling the existing functions in the user module (such as user_edit_access),rather than attempting to duplicate the logic, and leading to bugs where it's not identical.
          Never allow UID 0 or 1.
          The code in the user module to create and cancel users relies on 'administer users' permission, so we simulate this similar to the Subuser module (thanks to BWPanda in #1717876: Remove dependency on 'Administer users' permission).
          On the admin/people page, only show users that are editable - this is important to ensure that bulk operations are subject to the permissions checking.
          Fix bug causing error messages on cancel confirm (administerusersbyrole_form_user_multiple_cancel_confirm_alter).
          Fix bugs in visibility on user edit form (administerusersbyrole_form_user_profile_form_alter); make sure we don't duplicate the logic of the base form function, just add visibility where needed.
      
      4) Views - just minor tidy up
      
          hook_views_handlers is no longer needed in Views 3.
          _administerusersbyrole_can_cancel_user now calls user_cancel_access so it's a waste of time to call it again.
          Fix the text on the button to match the code now in Views.
      34b11167
  17. May 14, 2013
  18. Mar 12, 2013
  19. Dec 17, 2012
  20. Sep 15, 2012
  21. Sep 06, 2012
  22. Jul 07, 2012
  23. Mar 25, 2012