Description of the need
The ability to assign roles was added to core in backdrop, replacing the need for the Assign roles module.
In Drupal 7, the "assign roles" module had a setting to define which roles could be assigned. This made it possible to grant someone the permission to Assign roles
without allowing themselves to increase their own role beyond what was indented.
I would love to see this setting in Backdrop, with the Administrative role
initially excluded. This would make for a safer set-up out-of-the box.
Proposed solution
Add a setting for roles that are allowed to be assigned.
Alternatives that have been considered
Port the assign roles module, and have it include only the setting (since the feature has been added to core)
Additional information
We initially created this as a security issue, since it has security implications. However, since the permission is no more dangerous than "Administer users" -- which was the only way people could assign roles before this feature was added, we decided to move the PR to the public queue for more reviews.
Recent comments
We can no longer add contrib projects in the Tugboat sandboxes that we use for core PR's? Can this be fixed or is there a reason for this? We can add contrib projects to demo...
Apr 25th Weekly Meetings
The Mail System and MimeMail modules are now installed. I'll let you know if they solve the problem. Edit: Using Mail System with MimeMail I was able to send plain text emails. There is...
HTML Email treated as plain text
If you haven't already I recommend installing Mail System and MimeMail. The latter will help format emails as HTML and first helps with configuring which module will handle the formatting...
HTML Email treated as plain text