I think that the GetSimple core should allow 2 default user levels:
- administrator: access to everything
- normal user: access to everything in the admin panel except Plugins, Theme, Components, Settings (except own profile, which should be separated), etc. Those sections should also be hidden for them.
That is, normal users would not have access to any section where they could insert php code, and also the Plugins section (where they could disable some plugins to gain access to the other sections)
Plugins (like some that exist) could then create additional user levels based on that last one, impose more restrictions, etc.
(I'm suggesting this because a users plugin may not be able to totally prevent access to some of those sections, so I think it should be in the core.)
- administrator: access to everything
- normal user: access to everything in the admin panel except Plugins, Theme, Components, Settings (except own profile, which should be separated), etc. Those sections should also be hidden for them.
That is, normal users would not have access to any section where they could insert php code, and also the Plugins section (where they could disable some plugins to gain access to the other sections)
Plugins (like some that exist) could then create additional user levels based on that last one, impose more restrictions, etc.
(I'm suggesting this because a users plugin may not be able to totally prevent access to some of those sections, so I think it should be in the core.)