Determine what SaaS clients can and cannot customize
Proposal
The highest role site admins can have is Manager.
A manager can do the following:
- Administer blocks
- Administer comments and comment settings
- Edit own comments
- Post comments
- Skip comment approval
- View comments
- Use the sitewide contact form
- Use users' personal contact forms
- Use contextual links
- Administer account settings
- Administer date-time
- Administer groups
- Administer site information
- Edit contact form
- Exclude node title
- Access the files overview page
- Use Restricted HTML text format
- Bypass group access control
- Create a new group
- Administer meta tags
- Access the content overview page
- Administer content
- Bypass content access control
- Administer url aliases
- Access in-place editing
- Use shortcuts
- Use admin help pages
- Use site in maintenance mode
- View the administration theme
- Administer vocabularies and terms (cannot add new vocabularies)
- Use the administration toolbar
- Administer users
- Cancel own account
- Change own username
- View user information
Notable things managers cannot do (not exhaustive).
- Administer comment types
- Administer content types
- Administer block types
- Administer contact forms and contact form settings
- Administer file system
- Add edit and delete custom display modes
- Administer the display of comments, content types and blocks
- Add custom fields
- Administer text formats and filters
- Use Full HTML text format
- Administer group settings
- Administer image styles
- Administer themes
- Create new vocabularies
- Administer account settings
- Administer permissions
- Administer views
- Add modules
- Disable/enable modules
Outstanding Questions
-
Can we allow managers add/remove menu items? -
Can we allow users to administer terms, but not add new vocabularies? -
Can we allow users to customize views (eg: page title, path, the view mode(s) to be used)? -
Can we allow users to create new views?
Work Required
-
Revise and agree upon proposal -
Document policy in documentation project.
Potentially relevant modules
Already included in Drutopia
Other modules (no assessment done)
D8
- Block Permissions
- Block Content Permissions
- Block Region Permissions
- Configuration Read-only mode
- Contact Permissions
- Contact Form Permissions
- Contact Message Permissions
- Permissions Lock
- Theme Permission
D7 only
Edited by Nedjo Rogers