Right now, if someone has system admin access to the
Groups page, for instance, then they can edit the
permissions for all the groups, and alter user
memberships in all the groups.
Similarly, if someone has system admin access to the
Blocks page, then they can alter the block
configurations for all groups.
In sites with a large number of groups, and in which
you want to push administration tasks down the food
chain to power users in different departments, or
certain key managers, you need the ability to hand out
these kind of system admin tasks, but limit the scope
of these tasks to only certain groups in the system.
(You don't want the manager of the Documentation group
being able to edit the permissions for the Programming
group, but she should be able to edit the permissions
for the Documentation group).
A suggested approach for implementation, as far as the
interface goes: As part of the Modify/New Group page,
you could have a multi-select box of the groups in the
system. For each system admin permission that this
group is given, the group can only use that permission
to modify settings related to the groups that are
selected in the multi-select box.
Logged In: YES
user_id=1109439
This request is related to another request I have made: 1017438