Using "Admin Perms Tool" to standardize role permissions

[Sebastian Riemer]

Dear Sakai Dev Community,

I am considering standardizing role permissions across all sites and removing all permission overlays currently applied via !site.helper using "Admin Perms Tool".

My proposed approach would involve:

• Clearly defining all role permission sets.

• Revoking all permissions from sites that are not part of these well-defined sets.

• Granting the appropriate permissions to all sites according to the defined sets.

• Unchecking all permissions in the !site.helper role, with the exception of a single required permission (e.g., site.visit, per bug SAK-51853).

I would like to hear your thoughts: Is this a good approach, or are there potential issues I should consider?

Thank you in advance for your feedback.

Best regards,
Sebastian Riemer