Hi all, I'm new to drupal. And have to admit it's one heck of a CMS that's quite easy to learn, even though I didn't know anything about it 3 weeks ago. Sorry have to make you read my writing since English is not my mother tongue and I feel like telling a story would be the best way to describe the thing I'm facing right now. I'm thinking of creating a CMS for our customer so he could use it to manage his website, which is a website that has multiple level of membership. So I made several roles and set up some permissions. And also a role for the site admin. And for me the less he know about the additional features the better for me because it would give me time to sleep and enjoy fresh air. Because I don't want my client to accidentally do stuff that make things go haywire personally I would prefer not to troubleshoot (that kind of stuff) to the point I feel like shooting him, or myself or smoke packs of cigs from 1am to 7pm and kill myself due to overdose or tar and nicotine. Since my service contract with him is to give him support as long as he's in my hosting company. The thing is that I've made a siteadmin role. And through this role I've made all the necessary access control for him to build create stuff that I've made for him on the website through Drupal. But I'd still would like him to create roles and permission for his website members. And if I do that he'd be able to go to th access control panel and give him the rights I don't want him to have. So how do I do this? If I don't let him administer access control then he wouldn't be able to access create roles for the members. Next thing is, would there be a way so I could hide my user as the first user if he access the user list? If those things are not possible do any of you guys have the same kind of experience creating CMS for your customers? And what would be the best practice for permission and role for this? Or better do you have a sample of service contract for this kind of service? I'm also posting this in post installation section of Drupal forum but the reason I'm also posting this here is because I think DP has a wider audience thus giving me more options. Thanks in advance. Yours ass45sin.. or ass 45 sin... or just ass & sin or an ass.. a desperate one.
What if you set up a list of usernames with a password and various permissions ahead of time. Give your customer the list and let him/her hand them out to his/her employees? I would NOT give your customer full permissions. Too much damage could be done to the site.
I would talk to your customer and make user roles that have the access you are looking for for each user group then make a role with the ability to assign user with "administer access control" and/or "administer users" structure looking something like: 1. Guest 2. registered user 3. upgraded user A 4. upgraded user B 5. low level admin -> with "administer access control" and/or "administer users" -> your customer 6. Super User -> full admin Like that your customer can change the groups of other members without seeing all of the other admin items. If you are concerned that he will change himself to SU and start changing things then working with them in all cases will be hard because if they want to hack and screw up their own site its not really under your control
Thank you bric002, getanapple, your solution might be the best solution after all.. I've tried several module to no avail. Hope 6.0 fix this. Thanks again. ^_____^