modules/roleassign/README.txt

ROLEASSIGN
==========

RoleAssign specifically allows site administrators to further delegate
the task of managing user's roles.

RoleAssign introduces a new permission called 'assign roles'. Users
with this permission are able to assign selected roles to still other
users. Only users with the 'administer access control' permission may
select which roles are available for assignment through this module.

This module is sponsored by Webbredaktoren <http://www.webbredaktoren.se/>.


BACKGROUND
----------

It is possible for site administrators to delegate the user
administration through the 'administer users' permission. But that
doesn't include the right to assign roles to users. That is necessary if
the delegatee should be able to administrate user accounts without
intervention from a site administrator.

To delegate the assignment of roles, site administrators have had until
now no other choice than also grant the 'administer access control'
permission. But that is not advisable, since it gives right to access
all roles, and worse, to grant any rights to any role. That can be
abused by the delegatee, who can assign himself all rights and thereby
take control over the site.

This module solves this dilemma by introducing the 'assign roles'
permission. While editing a user's account information, a user with this
permission will be able to select roles for the user from a set of
available roles. Roles available are configured by users with the
'administer access control' permission.


INSTALL
-------

1. Copy the entire 'roleassign' directory, containing the
'roleassign.module' and other files, to your Drupal modules directory.

2. Log in as site administrator.

3. Go to the administration page for modules and enable the module.


CONFIGURATION
-------------

1. Log in as site administrator.

2. Go to the administration page for access control and grant 'assign
roles' permission to those roles that should be able to assign roles to
other users. Notice that besides the 'assign roles' permission, these
roles also must have the 'administer users' permission.

3. Go to the administration page for role assign and select those roles
that should be available for assignment by users with 'assign roles'
permission.

4. For each user that should be able to assign roles, go to the user's
account and select a role with both the 'assign roles' and the
'administer users' permissions.


USAGE
-----

1. Log in as a user with both the 'assign roles' and the 'administer
users' permissions.

2. To change the roles of a user, go to the user's account and review
the assignable roles and change them as necessary.


$Id: README.txt,v 1.10 2006/10/24 13:03:12 tbarregren Exp $
1	ROLEASSIGN
2	==========
3
4	RoleAssign specifically allows site administrators to further delegate
5	the task of managing user's roles.
6
7	RoleAssign introduces a new permission called 'assign roles'. Users
8	with this permission are able to assign selected roles to still other
9	users. Only users with the 'administer access control' permission may
10	select which roles are available for assignment through this module.
11
12	This module is sponsored by Webbredaktoren <http://www.webbredaktoren.se/>.
13
14
15	BACKGROUND
16	----------
17
18	It is possible for site administrators to delegate the user
19	administration through the 'administer users' permission. But that
20	doesn't include the right to assign roles to users. That is necessary if
21	the delegatee should be able to administrate user accounts without
22	intervention from a site administrator.
23
24	To delegate the assignment of roles, site administrators have had until
25	now no other choice than also grant the 'administer access control'
26	permission. But that is not advisable, since it gives right to access
27	all roles, and worse, to grant any rights to any role. That can be
28	abused by the delegatee, who can assign himself all rights and thereby
29	take control over the site.
30
31	This module solves this dilemma by introducing the 'assign roles'
32	permission. While editing a user's account information, a user with this
33	permission will be able to select roles for the user from a set of
34	available roles. Roles available are configured by users with the
35	'administer access control' permission.
36
37
38	INSTALL
39	-------
40
41	1. Copy the entire 'roleassign' directory, containing the
42	'roleassign.module' and other files, to your Drupal modules directory.
43
44	2. Log in as site administrator.
45
46	3. Go to the administration page for modules and enable the module.
47
48
49	CONFIGURATION
50	-------------
51
52	1. Log in as site administrator.
53
54	2. Go to the administration page for access control and grant 'assign
55	roles' permission to those roles that should be able to assign roles to
56	other users. Notice that besides the 'assign roles' permission, these
57	roles also must have the 'administer users' permission.
58
59	3. Go to the administration page for role assign and select those roles
60	that should be available for assignment by users with 'assign roles'
61	permission.
62
63	4. For each user that should be able to assign roles, go to the user's
64	account and select a role with both the 'assign roles' and the
65	'administer users' permissions.
66
67
68	USAGE
69	-----
70
71	1. Log in as a user with both the 'assign roles' and the 'administer
72	users' permissions.
73
74	2. To change the roles of a user, go to the user's account and review
75	the assignable roles and change them as necessary.
76
77
78	$Id: README.txt,v 1.10 2006/10/24 13:03:12 tbarregren Exp $