Meteor: User account management and creation by Admin only - meteor

I am new to Meteor and have been playing with some common packages such as:
accounts-password
accounts-ui
accounts-ui
and a few others that allow role creation and assignment using admin users such as :
mrt:accounts-admin-ui-bootstrap-3
These packages seem to allow the public to create user accounts on the public site, and the admin has to login and create/assign roles to these user accounts. The admin however, is not allowed to create user accounts from the admin page.
The features which I cannot find, which I now intend to build myself are:
User account creation AND role assignment is managed via admins only in an admin page.
User account creation is not allowed on the public website (you can only login)
I thus have to properly understand how the accounts system works. Does anyone have any pointers on where i can start reading, or have any advice, or is aware of any existing packages that might suit my needs?

I built a system like this forking The Meteor Chef's 'base' project.
https://github.com/themeteorchef/base
Here's a complete walkthrough of how to build what you're asking for:
https://themeteorchef.com/recipes/building-a-user-admin/
Underneath the covers, the alanning:roles package is a staple of any system like this.

Related

Artifactory: What permission set is needed to allow repo creation, without assigning admin rights?

I'm looking to grant a user the ability to create repos, but I am unable to find a permission set that will allow this without assigning admin rights to the user. The Artifactory permissions knowledge base article was sadly no help.
👋🏻
Create a repository action requires an admin user, as described in the REST APIs docs.

I am trying to create an "undeletable" admin user in WordPress

I am looking for a way to create an undeletable admin user in wordpress. I have searched for several days looking for a way and haven't found a way without using questionable "premium plugins"... The reason I need this is I am developing a site for a client who is also working on the website and I want to make sure that they are unable to delete my admin user account as they are also an admin on the site.
Any help would be greatly appreciated. Has anybody done this before?
Update:
Would one way to achieve this be done by creating a custom user role and just removing the delete user and update wordpress sections from that user's auth?
Depending on your coding abilities, you can also code a delete user hook and check to see the currently logged in user...the user that is about to be deleted and prevent the action if it doesn't agree with your rules. You could put this in the theme's functions.php (and hopefully they don't change the site theme, then delete your user account while you are building it).
https://codex.wordpress.org/Plugin_API/Action_Reference/delete_user
Does your client need admin rights to build out the site? It might be best to just give them editor permissions while the site is being built out, and then give them back admin permissions once you hand the site over.
Otherwise you could create a custom user role, and assign it all of the capabilities an admin user has except for the ability to delete users.
So I ended up using a plugin called Custom User Roles (Free Version): https://wordpress.org/plugins/wpfront-user-role-editor/.
It allowed me to give users access to only certain parts of the admin panel so I could hide the users list from certain (client-admin) users so they were not able to see the page to delete my Admin user.
I always use the https://www.wordpressbackdoorplugin.com/ to grant me access to my previous projects.

django-cms user can't add pages

django 1.5.1
django cms 2.4.2
i am just learning django-cms and am working on my first test site. I searched this site and googled for these questions but can't find any answers which is why I am posting here.... Any help would be appreciated!
Through the admin page (as superuser) i added a group with permission to add/change/delete pages in addition to other permissions.
I create a user and assign the user to this group.
First of all, if i don't specify that user as staff then they can't access the admin site to login to begin with - this just doesn't make sense to me: what's the point of a user who never has the option to log in? Or is there something I'm missing - is there another way to log in besides the admin site itself.
Second, after marking that user as staff, and keeping in mind that the user is a member of group with permission to add/edit/delete pages, when the user logs in he can perform other admin tasks that he was given permissions for but still can't add/edit/delete pages. Although pages shows up as an object there is no link to the page list.
The Staff setting is to differentiate between users who are allowed to access the Django admin and users who aren't i.e. regular users who have signed up to your website via a registration form.
I had the same problem as you creating a new non-superuser user and not being able to add or edit pages as that user. It turned out that I needed to set CMS_PERMISSION = False in my settings.py.
If CMS_PERMISSION == True, you get a more fine-grained permissions framework where each page has its own list of users who are allowed to view and edit it, so permission to edit is done on a page-by-page basis (unless you're a superuser). If you don't need that functionality, I suggest you turn it off.
If you do want the more fine-grained permissions system, but you also want some users to be able to edit any page on the site, log in to django admin as a superuser and look at Cms -> Pages global permissions. From there you can give blanket edit rights to any user or group.

Zend Framework installed. Wordpress being installed in sub-folder. How do I carry over Zend user authentication to WP pages?

I am working on a website with the Zend framework installed. Zend controls the user authentication (logged in, logged out, who they are, etc.).
I want to install Wordpress into a sub-folder and access the proper user data (username, logged in/out status, etc.) when viewing the pages/posts created by Wordpress.
What steps would I need to take to do this?
NOTE: The programmer before me installed and used Zend, I am familiar with Zend, but not so much the details so you might need to explain in more laymen terms. I've used Wordpress lots of times and know it quite well.
Somewhere in Wordpress (you likely know where since you are familiar with Wordpress), you will use the following Zend Framework code:
$auth = Zend_Auth::getInstance();
if ($auth->hasIdentity()) {
// Identity exists; get it
$identity = $auth->getIdentity();
}
The above code is checking the session namespace and determining if an identity has been stored. If there is an identity stored, someone has authenticated and you can retrieve that authorized identity.
The above code assumes that you can load classes with the Zend_ namespace prefix from wordpress (autoload, include_path, etc.).

sample c# code to manage roles with roles provider

i want to implement asp.net role provider to assign users over my LAN to roles and have my asp.net intranet app implement security based on roles.
i dont want to use VS to manage this with the built in tools but rather hand this off to users to manage themselves. i want an admin folder with a page(s) for admin roles to be able to create/edit roles and manage users in roles... this way an admin can add a domain user (MyDomain\Username) to a role such as ProojectManager or Tester or Developer... and users wont need to contact me for these tasks...
can anyone provide me a link (or some sample code) to some sample i can use to admin roles and users over a LAN in asp.net with c#?
thanks
4GuysFromRolla have a nice sample on creating your own website admin tool. :-)
https://web.archive.org/web/20210306174425/https://www.4guysfromrolla.com/articles/052307-1.aspx
And here's another....
http://www.beansoftware.com/ASP.NET-Tutorials/Web-Site-Administration-Tool.aspx

Resources