search

dotCMS / core

Headless/Hybrid Content Management System for Enterprises
http://dotcms.com
Other
849 stars 466 forks source link

Allow the users viewed on a portlet to be limited by site/company that a user belongs to #21698

Open swicken-dotcms opened 2 years ago

swicken-dotcms commented 2 years ago

Is your feature request related to a problem? Please describe. There are scenarios where a user might be able to manage other users, but only users for the site or company they belong to. Currently the Users portlet will show all users that exist with dotCMS, regardless of the site/company the managing user has access to.

Describe the solution you'd like Users should be able to manage other users based on the site they have permissions to access. Two solutions I've considered:

  1. Bring back the concept of a 'Company' on a user, and limit user management to the company they belong to.
  2. Create a new permission type at the site level that allows for user administration, then: a. In the users portlet, anyone who has this permission will only be shown non CMS Administrator users who have access to sites they have this permission on b. Any users they create they can only give access to sites they have this permission on.
stale[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.