I have found that a lot of the users we have given permission to use the sites we have created in webgui are dumber than a box of rocks. I would like to see a page that lists the items that are in the admin console with a check box or something to decide which groups can view that particular item. This would eliminate certain groups from seeing stuff you dont want them to access all together. What I am trying to accomplish is setting up a new group that would only be able to see commit changes, version tags, trash, and clipboard in the admin console.
side note: i would also like to be able to turn off certain tabs on the edit pages for certain groups... like be able to turn off the "display" tab and the "metadata" tab for a specific group to where they can only see the "properties" tab to keep them from screwing stuff up.
I actually submitted an RFE for much the same thing about 5 months ago. Unfortunately mine has been ranked extremely highly and so regardless of how much karma I put into it it'll never get done.
http://www.plainblack.com/rfe/request-for-enhancement/finer-control-of-admin-privileges
Regardless, I really hope this gets done!
-If my comment is useful, rate me - I can always use the karma! :)Join us on the #webgui irc channel on freenode! (I use the nick Radix)
As I understand it, group-level access controls can't be effective because users can be members of multiple groups.
There is a way to give UILevels to certain users and restrict certain asset types and menu items based upon UILevels.
There is also a way to provide controls and admin links (their own admin web page) if you want to go that route. As this wouldn't necessarily benefit *everyone*, I can see why it's taking so long to get into core.
--Maintainer of an unofficial WebGUI FAQ Please contribute questions or answers!When asking questions on this forum, please indicate (at least) which version of WebGUI you are using. Optional, but sometimes helpful, are your Operating System name and version, PERL version, and Apache version. The little icons next to my picture indicate my IM status. Yes, you are welcome to IM me. I am not an employee of Plain Black. My offers of assistance are subject to the general disclaimer of this discussion board that my answer may be completely wrong. Have a great day!U2U crythias on #webgui on irc.freenode.net
I don't see why users belonging to multiple groups changes prevents this from working as designed. Users would get the highest privileges they can based on the sum of all of their groups.
UILevels are user-based, not group based, and can be changed by the user (if they're admin) so they're not an effective mechanism for restricting admins.
I've added this into 7.4.
Closing.
