I find I need the "impersonate" feature for a website I'm building -- it is the perfect solution to supporting users who forget how to work the website or need help setting up their profile information. In fact, I have a group called "support" who I am tasking with this chore and I want them to be able impersonate any of the users.
EXCEPT, of course, me. I have a group for the people who run and control every aspect of the website, and only my partner and I have logons at this level. I don't want any "support" group members to be able to impersonate my "root" group. I may add a "manager" group at some point who should also not be accessible to the support staff. I guess I should also prevent support staff from impersonating each other as well. I'm no killjoy, but I want to prevent "pranking" and epic April Fools jokes between my support reps before they even get started. And I, of course, as "root" want to be able to impersonate anybody on my site. The only difference between me and the NSA is that my employees won't have to wonder or guess if I'm looking over their shoulder -- I'll tell them straight up! (just kidding. NSA also has a larger budget and cooler toys. there are actually several differences) I can see how I can add an "impersonate" group, and add it to either the auth_user table or specific rows, but that doesn't give me the layers I'm looking for. That is: support --> impersonate users managers --> impersonate support, users root --> impersonate all of the above Have I missed something obvious? -- Joe "benevolent dictator" B. -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
