view core/modules/user/user.permissions.yml @ 13:5fb285c0d0e3

Update Drupal core to 8.4.7 via Composer. Security update; I *think* we've
been lucky to get away with this so far, as we don't support self-registration
which seems to be used by the so-called "drupalgeddon 2" attack that 8.4.5
was vulnerable to.

administer permissions:
  title: Administer permissions
  restrict access: true
administer account settings:
  title: 'Administer account settings'
  description: 'Configure site-wide settings and behavior for user accounts and registration. This includes account cancellation methods, the content of user emails and fields attached to users.'
  restrict access: true
administer users:
  title: 'Administer users'
  description: 'Manage all user accounts. This includes editing all user information, changes of email addresses and passwords, issuing emails to users and blocking and deleting user accounts.'
  restrict access: true
access user profiles:
  title: 'View user information'
change own username:
  title: 'Change own username'
select account cancellation method:
  title: 'Select method for cancelling own account'
  restrict access: true
cancel account:
  title: 'Cancel own user account'
  description: 'Note: content may be kept, unpublished, deleted or transferred to the anonymous user depending on the configured user settings.'