Feature Wiki

Information about planned and released features

Tabs

Protect Administration Role

Page Overview

1 Description
2 Status
3 Additional Information
4 Discussion
5 Follow-Up

1 Description

In some scenarios a special role is used only for administrating users. Users with this role do not have the default "Administrator" role and its permissions. But currently they can "upgrade" their own account to the Administrator role which is not intended.

We suggest that users that are not assigned to the "Administrator" role cannot:

Edit users with the "Administrator" role. (not able to change user data/password/roles assignment)
Cannot assign users to the "Administrator" role

This should be the default behaviour and not an optional setting.

2 Status

Scheduled for: ILIAS 4.3
Funding: Credit Suisse AG / sr.solutions
Development: Feature is to be developed by Leifos

3 Additional Information

If you want to know more about this feature, its implementation or funding, please contact: Stefan Meyer (meyer AT leifos.com)

4 Discussion

JF 22 Feb 2012: We appreciate this idea and schedule it for 4.3.

Martin Studer, sr.solutions 04 Mar 2012:

We have a customer who has an advanced use case.
He has a role (user admin) for users who are responsible for the user administration.
He has a role (content admin) for users who are responsible for the elearning content.

In the moment the user admin has too many permission:
- For a user admin it should not be possible to change user accounts with the role "content admin".
- For a user admin it should not be possible to assign himself to the role "content admin".

We propose to implement the following functionality.
- A flag at the user account which allows only users with the Administrator role to edit user data, password or roles assignment
- A flag at the role which allows only users with the Administrator role to edit the role or assign users to the role

JF 5 Mar 2012: Do we need a setting per user? Could the setting for the role mean "Only admins can assign users and edit assigned users" of this role. We also appreciate the additional feature in this way and schedule it for 4.3.

5 Follow-Up

Last edited: 17. Apr 2025, 15:06, Kunkel, Matthias [mkunkel]