OrchardCore
OrchardCore copied to clipboard
OrchardCMS
Add user Edit and Delete permission to the users UI
This would provide a way to enable/disable permission to Edit or Delete users explicitly.
Fixes #11762
As @sebastienros suggested in meeting - changing username/password is functionally equivalent of deleting so there is not real different between two distinct permission edit/delete , hence IMO permission ManageUsers is enough for managing identity/permission related feature set provided OOTB.
However @CrestApps I also understand your requirement to have ability to add/edit users by roles other than Administrator that may need custom permission ( in your case in this PR EditUser/DeleteUser) where you might want to provide some additional functionality to manage other than identity/permission for the user being created/edited
For example - Building a CRM, where in a Sales Person may onboard new Account/Contact where he's adding sales related information that would also create a user's login account in OC as part of sales account creation process but the sales person really do not need have permission to create/manage user in OC as Administrator role has.
Above can be achieved by defining your own permission/controller and leveraging UserService/Workflow - keeping OOTB user management unchanged.
