User Creation Permission

[Brandin]

Mudmin,

What you are saying from what I understand corresponds with what I am doing, yes. The way I am setting up my permissions is the following:
-Everyone is a CSR, they have access to all the general pages - most uses will be created on this level
-Log Access, allows access to the personal

Code:

log.php

file which displays their system logs.
-User Management, allows access to

Code:

admin_user.php

Code:

admin_users.php

and

Code:

adduser.php

-Manager, allows access to all of my Database Tools, but for the entire system. So I have a log system, db management system, and integrity check system, on personal basis (so the personal pages pull results by

Code:

$userId

) whereas the Manager pages

Code:

SELECT *

with no

Code:

WHERE

clause.
-System Administrator, has access to the rest.

So in a sense, yes, I use this on page basis, so that everyone has basic access, and then if you need specific role access, you have added permissions.

I hope this makes sense. This is why someone who has access to certain spaces should be able to create someone at their level, because that truly could not hurt anything (theoretically). Because if they were to want to break something, at their level, they could do it from their account lol.