[opencms-dev] user rights module access

[Jorg Heymans]

Hi,
I have found the following code for saving a user in 
CmsResourceBroker.java :

        if( isAdmin(currentUser, currentProject) || 
(currentUser.equals(user)) ) {

            // prevent the admin to be set disabled!
            if( isAdmin(user, currentProject) ) {
                user.setEnabled();
            }
            m_dbAccess.writeUser(user);
            // update the cache
            clearUserCache(user);
            m_userCache.put(user.getName()+user.getType(),user);
        } else {
            throw new CmsException("[" + this.getClass().getName() + "] 
" + user.getName(),
                CmsException.C_NO_ACCESS);
        }


This to me looks like that unless you're member of the admin group, 
there is no way you can create/edit/delete users.
Can anyone confirm this observation ?

Regards
Jorg Heymans

Jorg Heymans wrote:

> Hi,
>
> Is there any way to make the opencms User mgmt module available to 
> non-Admin users (opencms 4.7.7)
> I have tried setting the permissions on folder 
> /system/workplace/administration/user to rwvrwvrwv- (including all 
> subfolders and files). The effect was that a normal user was able to 
> see the user mgmt module now, however was unable to save any 
> modifications made to a user. (getting a CmsException "Access denied").
>
> How can I enable this without adding one of our users to the Admin 
> group ?
>
> Thanks
> Jorg Heymans
>
>