To keep up with continual improvement I'd like to start a discussion around the permissions for userpoints. Currently we have
-Administer userpoints
-View userpoints
-View own userpoints
I'm starting to think we need a permission "View userpoints transaction details" and people have suggested "grant userpoints" and "moderate userpoints" so that non-admins can give points to other people.
I'd rather not just randomly add permissions without a good high level overview of what is/is-not needed. Of course we can't cover everyone's needs but we can definitely come up with a good broad range of applicable permissions.
Please comment with what permission(s) you'd like to see, please describe what the permission would/would-not allow and why you think its necessary. Example
--permission: "View transaction details"
--what it does: Allows a user to view the full transaction details of any user account
--why: Not all users need access to full transaction details just a balance overview
Comments
To further strengthen those
To further strengthen those permissions you mentioned, we can see from the scenario when using userpoints as monetary transactions, example for buying userpoints as credit or as payment in ecommerce/ubercart
--permission: "View OWN transaction details"
--what it does: Allows a user to view the full transaction details of their own account
--why: "View transaction details" too permissive, suitable for admin user only
--permission: "Grant userpoints"
--what it does: Allows an operator (non admin) to grant userpoints to any user, e.g. purchased through bank transfer/check/MO/etc offline
--why: used by staff, operator or agent, who are non-admin level
--permission: "Remove userpoints"
--what it does: Allows an operator (non admin) to refund to any user, redeem as cash etc
--why: used by staff or operator, who are non-admin level
CK Ng | myFineJob.com
totally agree with this new
totally agree with this new permission set.