/
Separate permission for "Module Installation" [5.2.1-RC1]

Separate permission for "Module Installation" [5.2.1-RC1]

Right now you need to login with "root" user to be able to install new modules from "Configuration > Modules" section. I think, that we should change this a bit by doing this:

  1. add "advanced:install" permission to "Configuration > Modules" section (internal permission name: "in-portal:mod_status.advanced:install")
  2. don't give this new permission to anybody
  3. check for this new permission instead of "current_user_id === ROOT"

This will continue to work as before for "root" user, because all permission checks are passing for him. As a bonus now we will be able to allow module install operation to any other user as well.

We need to update "/modules/module-name/install.php" script of each module to also verify "advanced:install" permission permission instead of of "current_user_id === ROOT".

Related Tasks