User permissions reconfiguration

[moodog4rg]

Hello:

I need the ability to create a new user type called Super Super User (for example) and restrict Super Users so they do not have the ability to install extensions or modify existing users.

Is this possible? If so, what steps do I need to take?

Your help is greatly appreciated.

[toivo]

Couldn't you use the existing user group Administrator and edit its permissions? That would be definitely easier.

[moodog4rg]

I could but the client whose websites I host have a bunch of users who already have Super User permissions.

I don't want my client to be able to grab the database for every site and move them over to another host leaving me holding the bag.

I appreciate any feedback you can give me. Thank you in advance.

[toivo]

Super Users is a special user group in Joomla with the highest permissions. Trying to limit their permissions in ACL configuration may produce unpredictable results.

It is of course possible to create another user group with equal or less rights, call it what you want, and move existing administrators there. However, suggest that any restrictions and changes in Super User permissions would need to be tested on a copy of the live site hosted in a development environment before introducing changes in Production.

Here are links to an ACL tutorial in Joomla 3.x and also to two articles from the Joomla Community Magazine about role based access control, if you want to review your client's workflow requirements. The articles were published several years ago but the principles are still the same:

J3.x Access Control List Tutorial
A Case for Role-Based ACL
Implementing Role-Based ACL