Remove Admin Menu Links : "Settings" "Modules" & "Appearance"

inebriated

Joined: 2012-07-05
Posts: 11

Posted: Sat, 2012-07-07 20:49

Hi there,

I would like to hide some Admin menu links from the admin panel.

In particular : Settings, Modules and Appearance menu items.

-------------------------

The reason is, once my gallery is setup and configured how I want it, I do not want admins having complete access over all the settings, so I thought the easiest way would be to remove the links...

out of sight, out of mind.

Any idea which files I need to edit? or how I could go about acheiving this?

Many Thanks in advance.

Andy

floridave

Joined: 2003-12-22
Posts: 27300

Posted: Sun, 2012-07-08 06:49

How do you propose that this be done? With css just hiding the items? Or with some code changes to some core core overrides? Some module?
How is Gallery to differentiated between you the admin and another admin? Is hiding the links with css secure enough if the user can view the source and manually enter the links themselves?
Why not just give the user permission to add items not change setting, modules and Appearance?

Dave
_____________________________________________
Blog & G2 || floridave - Gallery Team

inebriated

Joined: 2012-07-05
Posts: 11

Posted: Sun, 2012-07-08 12:12

Hi floridave,

How do you propose that this be done?
It doesnt need to be 100% watertight security so I imagine that hiding the links with CSS would be sufficient in this instance.

------------------------------------------------------

Or with some code changes to some core core overrides? Some module?

Ideally it would be nice to have this controlled by a module, but just hiding them would be enough initially.

------------------------------------------------------

How is Gallery to differentiated between you the admin and another admin?
Once the gallery is installed and configured by myself I wont be login into the gallery again unless required by the designated Admin.
I was thinking that if I need to revert a file to gain access that is no problem, or even gain access using the direct url to the component i wish to access for example (URL/admin/advanced_settings/)
I am setting up multiple gallerys for users, each gallery with have its own Admin.

------------------------------------------------------

Why not just give the user permission to add items not change setting, modules and Appearance?
Well ideally I wouldnt give the client Admin access and just let them manage the gallery from the frontend using permissions, however I am using the Registration module and I want the Admin to have access to Approve / Deny users and also edit comments/tags etc...

------------------------------------------------------

Once I have installed and configured the gallery there is no need for the Admin to have access to anything other than what is needed to manually approve (users / groups / comments / tags).

Any suggestions?

Kind Regards
Andy

***NOTE : I have managed the remove the whole menu bar by removing <?= $theme->admin_menu() ?> from admin.html.php, this removes the whole menu and I have created my own hardcoded links to the sections I require... so in a sense I have acomplished what I require.

But that got me thinking...

Is there any way to wrap <?= $theme->admin_menu() ?> in an IF / ELSE statement to check for a specific user ID?

I mean im assuming the first Admin / User on the gallery has an ID of 1?

Something like :
IF user = 1 then display = <?= $theme->admin_menu() ?>
ELSE display <my links>

(as you can tell I dont code PHP, but I know that it may be possible this way....)

rWatcher

Joined: 2005-09-06
Posts: 722

Posted: Sun, 2012-07-08 18:52

inebriated wrote:

But that got me thinking...

Is there any way to wrap <?= $theme->admin_menu() ?> in an IF / ELSE statement to check for a specific user ID?

I mean im assuming the first Admin / User on the gallery has an ID of 1?

Something like :
IF user = 1 then display = <?= $theme->admin_menu() ?>
ELSE display <my links>

(as you can tell I dont code PHP, but I know that it may be possible this way....)

When you're logged in, you should see your user name as a link in the top right corner, next to logout. If you click on the link, it'll go to something like "user_profile/show/#", # is your user id. User id #1 is "Guest User" on my gallery, so it's probably not that.

You should then be able to access the id number of the current user with "identity::active_user()->id".

so, something like (untested)
<? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?>

inebriated

Joined: 2012-07-05
Posts: 11

Posted: Sun, 2012-07-08 20:54

Hi rWatcher, thanks for your reply, can you just clarify a little for me please.

Ok so I got the main user admin ID (2)

I have tried what you suggested:
<? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?>
also tried
<? if (identity::active_user()->id == 2) $theme->admin_menu(); ?>

But it just removes the menu altogether in both instances.

If your example is correct then it pulls the current user id, but this will not be enough as other admins with different ID's will also be able to see the menu still?
I need to restrict the admin menu to the user id (2) only.
<? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?>

Am I doing something wrong?

Kind Regards and Many thanks for your reply

floridave

Joined: 2003-12-22
Posts: 27300

Posted: Mon, 2012-07-09 03:06

Quote:

so I imagine that hiding the links with CSS would be sufficient in this instance.

It gets a little tricky to do with just css. The reason is the user might have different permissions and have different rights to view the various links/actions.
Here is a way to get rid of the whole admin menu item:

#g-site-menu li:nth-child(4) {
     display: none;
}

The issue is that $theme->admin_menu(); is only in the admin theme. So the actions are still available.

<? if (identity::active_user()->id == 2) {
  $theme->admin_menu();
} ?>

Dave

_____________________________________________
Blog & G2 || floridave - Gallery Team

inebriated Joined: 2012-07-05 Posts: 11	Posted: Sat, 2012-07-07 20:49
	Hi there, I would like to hide some Admin menu links from the admin panel. In particular : Settings, Modules and Appearance menu items. ------------------------- The reason is, once my gallery is setup and configured how I want it, I do not want admins having complete access over all the settings, so I thought the easiest way would be to remove the links... out of sight, out of mind. Any idea which files I need to edit? or how I could go about acheiving this? Many Thanks in advance. Andy
	XUser login Username: * Password: * Create new account Request new password
floridave Joined: 2003-12-22 Posts: 27300	Posted: Sun, 2012-07-08 06:49
	How do you propose that this be done? With css just hiding the items? Or with some code changes to some core core overrides? Some module? How is Gallery to differentiated between you the admin and another admin? Is hiding the links with css secure enough if the user can view the source and manually enter the links themselves? Why not just give the user permission to add items not change setting, modules and Appearance? Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

inebriated Joined: 2012-07-05 Posts: 11	Posted: Sun, 2012-07-08 12:12
	Hi floridave, How do you propose that this be done? It doesnt need to be 100% watertight security so I imagine that hiding the links with CSS would be sufficient in this instance. ------------------------------------------------------ Or with some code changes to some core core overrides? Some module? Ideally it would be nice to have this controlled by a module, but just hiding them would be enough initially. ------------------------------------------------------ How is Gallery to differentiated between you the admin and another admin? Once the gallery is installed and configured by myself I wont be login into the gallery again unless required by the designated Admin. I was thinking that if I need to revert a file to gain access that is no problem, or even gain access using the direct url to the component i wish to access for example (URL/admin/advanced_settings/) I am setting up multiple gallerys for users, each gallery with have its own Admin. ------------------------------------------------------ Why not just give the user permission to add items not change setting, modules and Appearance? Well ideally I wouldnt give the client Admin access and just let them manage the gallery from the frontend using permissions, however I am using the Registration module and I want the Admin to have access to Approve / Deny users and also edit comments/tags etc... ------------------------------------------------------ Once I have installed and configured the gallery there is no need for the Admin to have access to anything other than what is needed to manually approve (users / groups / comments / tags). Any suggestions? Kind Regards Andy ***NOTE : I have managed the remove the whole menu bar by removing <?= $theme->admin_menu() ?> from admin.html.php, this removes the whole menu and I have created my own hardcoded links to the sections I require... so in a sense I have acomplished what I require. But that got me thinking... Is there any way to wrap <?= $theme->admin_menu() ?> in an IF / ELSE statement to check for a specific user ID? I mean im assuming the first Admin / User on the gallery has an ID of 1? Something like : IF user = 1 then display = <?= $theme->admin_menu() ?> ELSE display <my links> (as you can tell I dont code PHP, but I know that it may be possible this way....)

rWatcher Joined: 2005-09-06 Posts: 722	Posted: Sun, 2012-07-08 18:52
	inebriated wrote: But that got me thinking... Is there any way to wrap <?= $theme->admin_menu() ?> in an IF / ELSE statement to check for a specific user ID? I mean im assuming the first Admin / User on the gallery has an ID of 1? Something like : IF user = 1 then display = <?= $theme->admin_menu() ?> ELSE display <my links> (as you can tell I dont code PHP, but I know that it may be possible this way....) When you're logged in, you should see your user name as a link in the top right corner, next to logout. If you click on the link, it'll go to something like "user_profile/show/#", # is your user id. User id #1 is "Guest User" on my gallery, so it's probably not that. You should then be able to access the id number of the current user with "identity::active_user()->id". so, something like (untested) `<? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?>`

inebriated Joined: 2012-07-05 Posts: 11	Posted: Sun, 2012-07-08 20:54
	Hi rWatcher, thanks for your reply, can you just clarify a little for me please. Ok so I got the main user admin ID (2) I have tried what you suggested: <? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?> also tried <? if (identity::active_user()->id == 2) $theme->admin_menu(); ?> But it just removes the menu altogether in both instances. If your example is correct then it pulls the current user id, but this will not be enough as other admins with different ID's will also be able to see the menu still? I need to restrict the admin menu to the user id (2) only. <? if (identity::active_user()->id == ID_NUM) $theme->admin_menu(); ?> Am I doing something wrong? Kind Regards and Many thanks for your reply

floridave Joined: 2003-12-22 Posts: 27300	Posted: Mon, 2012-07-09 03:06
	Quote: so I imagine that hiding the links with CSS would be sufficient in this instance. It gets a little tricky to do with just css. The reason is the user might have different permissions and have different rights to view the various links/actions. Here is a way to get rid of the whole admin menu item: #g-site-menu li:nth-child(4) { display: none; } The issue is that $theme->admin_menu(); is only in the admin theme. So the actions are still available. <? if (identity::active_user()->id == 2) { $theme->admin_menu(); } ?> Dave _____________________________________________ Blog & G2 \|\| floridave - Gallery Team

Remove Admin Menu Links : "Settings" "Modules" & "Appearance"

XUser login