hi there!
i need a group which has not full admin control to be able to create users and groups.
members of said group may not have access to āapp settingsā and āadmin settingsā as i fear they will accidentally mess things up.
TLDR:
use the app Custom CSS to hide certain settings by enabling it for a specified group
the detailed solution:
the addon Custom CSS lets you customize the appearance of your nextcloud and its effects can be restricted to groups.
if we restrict it to a group āteamā (or anything else) every admin is part of and write code to hide the settings, only one admin account which is not part of this group can see them.
of course this is not a secure solution, since any admin can just leave the āteamā group to purposefully mess things up. but this would be a rare case as i know of no employees that would try to break rules.
not the prettiest solution, but hope this helps
here the badly written CSS: (if anyone actually can write CSS and is kind enough to help improve this code, please do)
/do not display administration settings in settings tab/
div#content.app-settings div#app-navigation.without-app-settings > ul:nth-child(1) > li:nth-child(10) > a:nth-child(1) {
display: none;
}
div#app-navigation.without-app-settings > ul:nth-child(1) > li:nth-child(11) > a:nth-child(1) {
display: none;
}
/insert number of child for x and repeat the following three lines for all elements/
div#app-navigation.without-app-settings > ul:nth-child(1) > li:nth-child(x) > a:nth-child(1) {
display: none;
}
(As the side bar of the settings view is one big block, I was unable to remove the administration settings as a whole, instead I needed to remove each element separately. Depending on the apps you have, you will have different elements.
In order to remove them, use the āinspect elementā tool to determine the desired css-selector, then paste it into the custom css code with the instruction to not display it.)
if you want other Custom CSS for all non-admin users make all users part of a āusrā (or anything else) group and add this group to the list of groups allowed to the effects of Custom CSS. the changes for admins do not affect the users.
i agree, that this is still an underdevelopped idea.
nevertheless, there could be a whole new system of user authorization. however I know too little of this topic to participate in this discussion.
for a small-scale solution in a trustworthy environment the custom css idea should work and be in compliance with nextcloud philosophy.