05-27-2017, 02:55 PM
Hello,
I have made changes to my system that will allow you to designate User Management personnel who can safely and securely work with users in your system without having the risk of breaking things.
Moving the add user form to its own page:
https://hastebin.com/ivaxusayak.xml (save as adduser.php in usersc)
Note that this adduser.php page does not have the permission selector, because my system is based on levels allowing access to specific pages, e.g. everyone has the default level of "1" (User), if you are a User Manager, you have access to certain pages, System Admin, Database Admin, etc. So this add page will auto-assign the user to Level 1.
Remove the delete buttons from the admin_users.php page and modify the columns, remove the adduser form:
https://hastebin.com/ijebodiwil.xml (save as admin_users.php in usesrc)
Add the delete button to admin_user.php, and only allow user to add or remove permissions THEY have, for example:
Bob has Users Level 1, 2 and 4.
Editor has Users Level 1, 3 and 4.
The System has User Levels 1, 2, 3, 4 and 5.
The Editor can only see Levels 1 and 4 on Bob's profile in the remove section, and Level 3 in the Add Section since those are the permissions they have assigned to themselves.
https://hastebin.com/liwelegiti.sm (save as admin_user.php in usersc).
This calls for a custom function:
https://hastebin.com/fotiyagiga.php
I hope these changes work for some of you
I have made changes to my system that will allow you to designate User Management personnel who can safely and securely work with users in your system without having the risk of breaking things.
Moving the add user form to its own page:
https://hastebin.com/ivaxusayak.xml (save as adduser.php in usersc)
Note that this adduser.php page does not have the permission selector, because my system is based on levels allowing access to specific pages, e.g. everyone has the default level of "1" (User), if you are a User Manager, you have access to certain pages, System Admin, Database Admin, etc. So this add page will auto-assign the user to Level 1.
Remove the delete buttons from the admin_users.php page and modify the columns, remove the adduser form:
https://hastebin.com/ijebodiwil.xml (save as admin_users.php in usesrc)
Add the delete button to admin_user.php, and only allow user to add or remove permissions THEY have, for example:
Bob has Users Level 1, 2 and 4.
Editor has Users Level 1, 3 and 4.
The System has User Levels 1, 2, 3, 4 and 5.
The Editor can only see Levels 1 and 4 on Bob's profile in the remove section, and Level 3 in the Add Section since those are the permissions they have assigned to themselves.
https://hastebin.com/liwelegiti.sm (save as admin_user.php in usersc).
This calls for a custom function:
https://hastebin.com/fotiyagiga.php
I hope these changes work for some of you