README

TYPO3 CMS backend module for delegated management of backend users, backend groups, module permissions, DB mounts, page tree access and file mounts.

The extension is built for TYPO3 13.4 LTS and follows TYPO3 extension packaging conventions so it can be installed through Composer and published on Packagist.

Package

Extension key: ppl_rights_management
Composer package: ppl/ppl_rights_management
Current release: 13.4.0
TYPO3 compatibility: 13.4.0-13.4.99
PHP compatibility: >=8.2
License: GPL-2.0-or-later

Features

Overview of effective backend permissions for selected users or groups
Backend group management
Record permissions for page types and database tables
Backend module permissions
Group inheritance management
Backend user group assignment
Direct backend user rights management
DB mount and file mount management
History log for rights management changes
Delegated write mode for non-admin backend users

Delegated users can only assign rights they effectively have themselves. Admin users can always save.

Installation

Install the extension with Composer:

composer require ppl/ppl_rights_management:^13.4

Activate the extension in TYPO3 if your setup does not do this automatically:

vendor/bin/typo3 extension:setup

After installation, run the TYPO3 database schema analyzer or deployment command so the history table tx_pplrightsmanagement_history is created.

Backend Module

The module is registered below System as PPL Rights Management.

TYPO3 backend access is still controlled by backend groups. Add the module to the allowed modules of the backend groups that should open it.

Extension Configuration

The extension provides these configuration options under ppl_rights_management:

enableDelegatedWrites: Enables write access for configured delegated backend groups. When disabled, delegated groups can open the module read-only.
moduleAccessGroupIds: Optional comma-separated list of backend group UIDs or exact group titles that may access the module through the automatic group resolver.
enforceUserPermissions: Restricts the displayed rights to rights the current backend user effectively has. When disabled, unavailable rights remain visible but read-only for delegated users.

History

Successful save operations are written to tx_pplrightsmanagement_history.

The history stores:

backend user UID and name
optional impersonation source
scope
action
summary
payload before and after the change

Versioning

This package uses TYPO3-aligned semantic versioning.

For TYPO3 13.4 LTS, releases use the 13.4.x line. The Composer package should be released from Git tags, for example:

git tag v13.4.0
git push origin v13.4.0

Do not add a version field to composer.json; Packagist reads the version from Git tags.

When publishing from a monorepo, publish this package directory through a subtree split or a dedicated repository. Packagist expects the package composer.json at the repository root.

Development

The extension is PSR-4 autoloaded from Classes/:

"Ppl\\PplRightsManagement\\": "Classes/"

Relevant files:

Configuration/Backend/Modules.php: backend module registration
Configuration/Icons.php: backend icon registration
ext_conf_template.txt: extension configuration
ext_tables.sql: database schema
Resources/Private/Templates/: backend Fluid templates
Resources/Public/: CSS, JavaScript and icons

License

This TYPO3 extension is licensed under the GNU General Public License, version 2 or later. See LICENSE.

ppl / ppl_rights_management

Maintainers

Package info

Statistics

Security