User login

Ask Agaric: Unable to edit a page

I also can't edit this page:
http://example.com/but-i-can-see-revisions

three users all created 11 weeks 11 hours ago had the role of "submin" -- here they are and their last access.

Not-Agaric Member 3 weeks 4 days ago
Alsonot Agaric 6 weeks 3 days ago
Stillnot Ourfault 11 weeks 11 hours ago

We probably weren't clear enough at all, but submin (borrowing from the modesty, falsely or not, of Subcomandante Marcos) is the user we grant all powers to-- just blindly checking off every box, because that makes it easier for us.

So I'm not sure how they got this role, but it's the superpower role.

For you, we gave you the role of admin (and all of this we make up, by default Drupal comes only with an anonymous user role and an authenticated user role). Here we did not check off permissions for things we knew you would not want to deal with, such as "administer filters" and "administer imagecache".

However, we did provide your admin role with "administer access control" which means you can go to:

Administer » User management » Access Control
http://example.com/admin/user/access

and give yourself whatever permissions you want!

In this case, however, you have all the appropriate node access permissions-- the problem is with the input filter permissions. The page must have been edited with another filter, so this would in fact require giving yourself "administer filters" to fix (actually, you wouldn't have to fix anything, because with that permission you automatically have access to all input formats, and that's the problem-- you don't want to be able to put in PHP code, because you can take out the whole site, or open up a security hole, with that.)

Administer » Site configuration » Input formats
http://example.com/admin/settings/filters

So permissions here were actually set correctly. Not-Agaric Member, given submin power (maybe by me way back?), had saved it as PHP Code, which he really shouldn't have– I had already created a special format called Pure HTML that doesn't try to insert line breaks and so fully respects full formatting (the default Full HTML allows all HTML code, but tries to insert breaks as well).

To create junior partners that have no chance of taking over the site, create a new role, and make sure the role does NOT have "administer access control" permission (or administer input formats for that matter).

Administer » User management » Roles
http://example.com/admin/user/roles

You are now a black-belt Drupal administrator. Use your powers wisely...

I also can't edit this page:
http://example.com/but-i-can-see-revisions

three users all created 11 weeks 11 hours ago had the role of "submin" -- here they are and their last access.

Not-Agaric Member 3 weeks 4 days ago
Alsonot Agaric 6 weeks 3 days ago
Stillnot Ourfault 11 weeks 11 hours ago

We probably weren't clear enough at all, but submin (borrowing from the modesty, falsely or not, of Subcomandante Marcos) is the user we grant all powers to-- just blindly checking off every box, because that makes it easier for us.

So I'm not sure how they got this role, but it's the superpower role.

For you, we gave you the role of admin (and all of this we make up, by default Drupal comes only with an anonymous user role and an authenticated user role). Here we did not check off permissions for things we knew you would not want to deal with, such as "administer filters" and "administer imagecache".

However, we did provide your admin role with "administer access control" which means you can go to:

Administer » User management » Access Control
http://example.com/admin/user/access

and give yourself whatever permissions you want!

In this case, however, you have all the appropriate node access permissions-- the problem is with the input filter permissions. The page must have been edited with another filter, so this would in fact require giving yourself "administer filters" to fix (actually, you wouldn't have to fix anything, because with that permission you automatically have access to all input formats, and that's the problem-- you don't want to be able to put in PHP code, because you can take out the whole site, or open up a security hole, with that.)

Administer » Site configuration » Input formats
http://example.com/admin/settings/filters

So permissions here were actually set correctly. Not-Agaric Member, given submin power (maybe by me way back?), had saved it as PHP Code, which he really shouldn't have– I had already created a special format called Pure HTML that doesn't try to insert line breaks and so fully respects full formatting (the default Full HTML allows all HTML code, but tries to insert breaks as well).

To create junior partners that have no chance of taking over the site, create a new role, and make sure the role does NOT have "administer access control" permission (or administer input formats for that matter).

Administer » User management » Roles
http://example.com/admin/user/roles

You are now a black-belt Drupal administrator. Use your powers wisely...

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
  • You may post code using <code>...</code> (generic) or <?php ... ?> (highlighted PHP) tags.
  • You can use Markdown syntax to format and style the text. Also see Markdown Extra for tables, footnotes, and more.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <blockquote> <small> <h2> <h3> <h4> <h5> <h6> <sub> <sup> <p> <br> <strike> <table> <tr> <td> <thead> <th> <tbody> <tt> <output>
  • Lines and paragraphs break automatically.

More information about formatting options

By submitting this form, you accept the Mollom privacy policy.