-
Bug
-
Resolution: Fixed
-
None
-
None
-
Emptyshow more show less
problem
Currently a user can have only the "admin" role. But then this admin is not able even to log in, since in addition the PM and Editor role is needed.
This is not very nice and intuitive.
Therefore we should clean up the role / right mapping, so that admin and pm roles are not additive any more.
Meaning:
- admin should automatically have the rights of all other roles
- pm should automatically have the rights of all other roles except API and admin
Trying to login without Editor role is causing the following error:
ERROR in core: E9999 - No initial_page resource is found.
Previous intended solution
The previous intended solution of this issue was to clean up ACL roles and rights, so duplicate the needed rights from editor, to pm and admin and so on.
Implemented solution
Much faster was the creation of auto_set_role resource, defining for each role which other role should be set automatically on choosing the affected role.
- relates to
-
TRANSLATE-2585 Evaluate auto_set_role acl for OpenID authentications
- Done
Backdraw of the the implemented solution: since its implemented on a ACL level, the call must be in the editor module, other modules (like the login in the default module) may not read the auto_set_roles then.