[08:02:38] | * MiriamNugent[m] has joined #farmos |
[08:34:47] | <MiriamNugent[m]> | Hi mstenta! I'm working on the [farm_multitenant](https://www.drupal.org/project/farm_multitenant) module and need some help with managed roles. Is there away to remove or override managed role permissions? By default the Manager and Worker roles have 'create all' permission on all entity types. We want to remove the 'create organization' permission because a member of a particular farm organization should not be able to create another |
[08:34:47] | <MiriamNugent[m]> | organization. Is there some way we can do that? |
[09:30:36] | <mstenta[m]> | Hi Miriam Nugent! |
[09:30:44] | <mstenta[m]> | Ah! So I think we might be taking care of that in the pull request already... |
[09:31:36] | <mstenta[m]> | See: https://github.com/farmOS/farmOS/pull/849#issuecomment-2843892720 |
[09:32:39] | <mstenta[m]> | tl;dr: the Worker role will have explicit permission to create all entity types except organization |
[09:32:51] | <mstenta[m]> | Manager will be able to |
[09:33:42] | <mstenta[m]> | (Now would be a great time to review the recent work paul121 has been doing in that PR! In case it overlaps with anything you're doing...) |
[10:36:40] | <MiriamNugent[m]> | that looks like what I need mstenta I'll check it out. Thank you! |
[12:02:02] | <symbioquine[m]> | farmOS weekly dev call on now - all are welcome! https://meet.jit.si/farmos-dev |
[13:23:26] | <paul121[m]> | <MiriamNugent[m]> "that looks like what I need..." <- I made this change for the `farm_worker` role in this commit: https://github.com/farmOS/farmOS/pull/849/commits/13e3df40600a0bd7827232... |
[13:23:26] | <paul121[m]> | If you want to copy/paste that into your dev environment you can test. It would be good to have someone test it! |