Installation

• Install this module in a usual way

Configuration

• By default all users except a superuser restricted to escalate the privileges
• There is only one configuration option this module provides. Under superuser open menu [[ Settings  ]] >> Users & Companies >> Users
• In Access Rights tab you can select 'Allow add implied groups from settings' - to allow some users to configure modules by means of group_XXX fields from Settings menus

Usage

Let's take Sales (sale_management) module as an example.

Without this module installed:

• Say you have a user with administration rights Administration: Access Rights. This user thus may increase his own rights in Application Accesses from Sales: User: Own Documents Only to Sales: Administrator. Also he can open menu [[ Sales ]] >> Configuration >> Settings and select Customer Addresses there and then click [Apply] button (adding group_sale_delivery_address)

With this module installed:

• The user from previous example cannot increase his privileges. There is no Sales: Manager option for him, and also no Customer Addresses option in module configuration
• The only exception is done for users who are in special group 'Allow add implied groups from settings' - if your user is included in this group by the superuser then you may select Customer Addresses from Sale module Configuration >> Settings menu