[Building Sakai] Permission to disallow person in role to change role

[Steve Swinsburg]

Hi Carl,

Two possible parts to this:

1. The site.roleswap permission gives user's the ability to swap their roles via the dropdown in the tab bar. This is a new feature for 2.6 but only affects maintain user's by default (unless you add the permission to other roles explicitly).

2. But I think you mean in Site Info in the list of participants where you can change roles. If so, you want to disable 'site.upd.site.mbrshp' and possibly 'site.upd.grp.mbrshp' for that role. This will allow a user to view the list of participants but not add or change. This is in 2.5+. 

Alternatively, take away 'site.upd' and they can't do anything in Site Info. They will need 'site.viewRoster' to see the list of participants (which you most likely already have).

Here are some related JIRA's:
http://jira.sakaiproject.org/browse/SAK-7768
http://bugs.sakaiproject.org/browse/SAK-10990

And this one which takes it a step further:
http://bugs.sakaiproject.org/browse/KNL-371

cheers,
Steve


On 26/02/2010, at 8:06 AM, Carl Hall wrote:

> Georgia Tech has a scenario where we have a class with TAs and a Head TA (both are defined roles in the site).  We allow the Head TA to see and do some things but not the regular TAs.  The problem has come about where a TA can go into Site Info and change their role to Head TA or anything else.  Is there a permission in realms or otherwise that will allow us to disable people in a role from changing their own role? _______________________________________________
> sakai-dev mailing list
> sakai-dev at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
> 
> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20100226/614dad34/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3689 bytes
Desc: not available
Url : http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20100226/614dad34/attachment.bin