The system should have by default the below roles.
Make sure each role has exactly the permissions it requires:
Anonymous: can see content but not users
Authenticated: should be able to add ideas, comments, and vote on them.
Site-manager: should be able to manage all content, manage all users (except for the admin), and have access to all non-structural configurations. I.E. site manager shouldn't be able to turn on/off modules and features, use PHP or have any permission that can allow it to gain admin control
Consider to add the following roles:
Guest: can add ideas that will not be published
Community manager: only manage content and users (except for user 1), and no configuration
The system should have by default the below roles. Make sure each role has exactly the permissions it requires:
Consider to add the following roles: