Hi Thomas,

> On 17 Jan 2017, at 16:54, Thomas Mortagne <[email protected]> wrote:
> 
> Hi devs,
> 
> I'm thinking since a long time that maybe we should automatically make
> superadmin the author of the pages when installing a XAR as long as
> the current user (and current author) have programming right (i.e. has
> the same rights than superadmin when the extension is installed). I
> don't really see anything against it these days and it's easy to do so
> why not.
> 
> Basically the goal is to reduce the possibility to break extensions
> when you play with existing users/groups/rights. Common user case
> being to get rid of some old adminsys leaving the company.
> 
> WDYT ?

Why not. However I haven’t thought enough about it but right now the downside I 
see is the loss of accountability/tracability. It’s interesting to know what 
user has installed a given page. Using superadmin would loose this info.

BTW and related to this, I’d prefer to have a System user instead of using 
superadmin. The rationale is that super admin is user and you can log with it 
whereas System wouldn’t be a user that you can log with. It would represent a 
change made by the system. This could be another discussion but I thought I 
would mention it here to be complete.

Thanks
-Vincent

> Note: to be complete we could imagine the same kind of thing for admin
> user but that require the introduction of a virtual admin right user
> like superadmin is a vitual programming right user. But let's not
> discuss too many thing at once.
> 
> -- 
> Thomas Mortagne

Reply via email to