Site administrators are users that are able to deal with the whole Tuleap administration. Currently, there are 2 ways to define these users:
- They are administrators of the technical project
Administration Project (with project ID 1)
- They are member of a global permission delegation user group with the
Platform administration permission
The project Administration Project is not protected, and can be deleted. This means that if we don't set any permission delegation, then the Tuleap instance does not have any administrator anymore.
We have to ease and enhance it by implementing the following steps :
- Project
Administration Project (with project ID 1) cannot be deleted anymore if there is no permission delegation
- Add the role in the user edit form and take this role into account
- Do not be able to suspend or delete the last user that has the
Site Administration role
- On fresh installation, add the
Site Administration role to the default admin user
- Add a forgeupgrade to add the
Site Administration role on expected users (admins of project 1 and from permission delegation)
- Do not take into account the
Administration Project anymore
- Drop the
Plateform Administration permission delegation.