How to create a Plone 4 group who's sole purpose is to manage users?

问题

I'm trying to set up a Plone group (Plone 4.0.7) that will be responsible purely for creating and amending users. I don't want them to have full admin access to the site, purely to the Users and Groups functionality.

I have created a role in my.package/profiles/default/rolemap.xml like so:

<role name="Maintain Users" /> 

and then added a permission thus:

<permission name="Manage users" acquire="false">
    <role name="Maintain Users" />
    <role name="Manager" />
</permission>

In my.package/setuphandlers.py I have added a new group that uses the role:

groups = {
    ....
    'Service Desk': ['Maintain Users', 'Member'],
    ....
}

I am able to add users to my newly created Service Desk group, so I'm confident that works, but what I'm not getting is the ability for users in that group to be able to Maintain Users.

I naively expected there to be an option on the menu (similar to 'Site Setup') once they had logged in, this is not the case.

What additional steps do I need to take to be able to achieve this?

回答1:

You have to grant these 2 permissions to your custom role:

• Plone Site Setup: Overview (for the menu entry and the access to the control panel)
• Plone Site Setup: Users and Groups (for the permission to manage users and groups)

来源：https://stackoverflow.com/questions/8245484/how-to-create-a-plone-4-group-whos-sole-purpose-is-to-manage-users