Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

New-user role default should be "Contributor," not "Super" #1007

Open
dsalo opened this issue May 17, 2023 · 1 comment
Open

New-user role default should be "Contributor," not "Super" #1007

dsalo opened this issue May 17, 2023 · 1 comment

Comments

@dsalo
Copy link

dsalo commented May 17, 2023

In the role-assignment dropdown in the Add New User screen, the default role is "Super." The default should instead be the lowest-privilege role, "Contributor."

The "Super" default is problematic for security because it inclines Omeka admins to violate the Principle of Least Privilege by accidentally/thoughtlessly/cluelessly assigning unnecessary system privileges to new users. It is also a tiny bit annoying for admins because typically, most users on an Omeka instance will be Contributors, not Supers.

(Since this touches on security, I did use the security email first, and was encouraged to post an issue.)

@zerocrates
Copy link
Member

I'm thinking maybe having no default at all here is the best move: I'd rather not try to guess whether sites are more commonly going to want Contributors or Researchers, etc.

So to have the Role selection start on a "Select Below" choice and require the user to affirmatively pick a role for the new user.

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants