Forums (Obsolete)

Portal Engine Questions on portal engine and web parts.

Version 5.x > Portal Engine > Permission / Role Administration

View modes:


Member	stacey.abshire-terradon - 3/3/2011 11:08:20 AM Permission / Role Administration Here's what I am trying to accomplish. I am trying to create users who have permissions to create other users, but can only assign those new users to a small subset of roles. Is this possible? How?

Kentico Support

kentico_radekm - 3/3/2011 1:13:00 PM

RE:Permission / Role Administration

Hello.

If you want some user to be able to create other users, she needs permission for "Users" module. You can assign this permission to her in CMSDesk -> Administration -> Permissions -> Modules / Users. She also needs proper UI personalization settings, as they can be defined in Site Manager -> Administration -> UI personalization section.

However, in current version it is not possible to define set of roles user can be assigned to. If user has required permission, she can add other user to any existing role assigned to given site.

Best Regards,
Radek Macalik

Member

nvpat - 8/3/2011 3:44:52 PM

RE:Permission / Role Administration

Is this feature planned for an upcoming version? We need the ability to at least prevent a user from assigning roles that he himself doesn't have. That way a user cannot assign himself more privileges than he currently has, either directly or indirectly. I feel it's an essential security feature. Without it, it's impossible to assign user management roles to anybody without giving them unlimited access.

Thanks.

Kentico Developer

kentico_helenag - 8/4/2011 6:19:55 AM

RE:Permission / Role Administration

Hello,

we do not plan this feature since we think it is a very specific scenario. You can suggest this feature on http://kentico.uservoice.com. If it has many voices, we will implement it to next versions.

However, you may develop the functionality by yourself. You can create a custom interface with a custom role selector which will select the roles according a rule. You can see how we select the roles for users in:

~\CMSSiteManager\Administration\Users\User_Edit_Roles.aspx

You can use API to assign a role to a user like: Managing roles

Best regards,
Helena Grulichova

Top