Split or shared permissions

Events happening in the community are now at Drupal community events on www.drupal.org.
Flying Drupalist's picture

All the guides for user sharing says to share permission settings. But if your sites have different modules/content types, shared permissions don't work, and in which case the correct thing to do is to let each site handle its own permissions table. Right?

Comments

Yes

boris mann's picture

Any guide will pre-suppose a particular model. So, if you have different modules, you'll need to split off permissions.

BTW -- I would suggest something like Domain Access for something a bit simpler.

Here is my experience so far

dejb's picture

Here is my experience so far with this. I'm using separate 'system' tables for different domains to make sure a particular module is only loaded for a particular site. Putting the module in the appropriate directory ('sites/mydrigg.site.com/modules' instead of '/sites/all/modules') didn't work so AFAIKS this was my only option. My reading of the code indicates that any module enabled in the 'system' table is loaded regardless of which directory the code is in. This experience contradicts some documentation I have seen.

So now the problem I'm having is that if I try to edit the role permissions (not per-node but the global ones in Access Control) on the site without the extra module then the permissions don't appear. When I go to save the permissions it removes the ones for that module. So I'm going to try and use a separate permission table. Hopefully that will work.

Is this the same conclusion you came to?

BTW we are using the Domain Access module and in general it is great for node based access issues. However I've still need to hard code some things in the settings.php file.

What i'm doing is splitting

btopro's picture

What i'm doing is splitting off the permissions table but sharing the roles table. Then once I setup one site I just copy and paste the permissions tables over to the other sites. Not automated but it at least gets you to the correct default state and then you can turn on / off the other modules and change permissions from there. I've had the same experience as you though in going through and figuring out what tables to split off and which to share.

"Plaguing the world with Drupal; One Plone, Moodle, Wordpress, Joomla user at a time since 2005." ~ btopro

http://elearning.psu.edu/
http://elearning.psu.edu/projects/
http://elearning.psu.edu/drupalineducation/

Same here. If you don't have

eli's picture

Same here. If you don't have exactly the same modules on each site, you don't want to share permissions

Multisite

Group organizers

Group notifications

This group offers an RSS feed. Or subscribe to these personalized, sitewide feeds: