Activating/deactivating roles on the fly in a login session

[Nicklas Nordborg]

A user with multiple roles should be able to select which roles should be active during a session. For example, a user that is also an "Administrator" might want to disable the "Administrator" role until it is needed.

Which roles should be active after logging in? There are a number of possible options:

1. It is automatically remembered per user.
2. A configuration option for each role that forces a role to be either active or not.
3. A combination of 1 and 2. Some roles are forced, some are remembered.
4. As 3 but each user is allowed to configure which roles that should be active or not.

To preserve backwards compatibility, lack of configuration settings must mean that all roles are active.

UPDATE The final implementation is different from all of the above alternatives. The default setting is that all roles are active after logging in. A user may choose that some roles should be inactive after logging in (BASE -> Preferences -> Inactive roles dialog). Changes during the session are not remembered.

[Nicklas Nordborg]

(In [7294]) References #2043: Activating/deactivating roles on the fly in a login session

Implemented support for setting a role as inactive in the core. New public methods are in the SessionControl class.

The getRoles() method has been deprecated and replaced with other methods (since this method return ALL roles including inactive). Code that uses this method for permission checking may experience PermissionDeniedExceptions if a users has de-activated a role.

The "User" menu to the far right has been updated to include a section with roles where the user can toggle the active/inactive status.

The settings are not (yet) remebered between sessions. All roles start out in the active state after logging in.

[Nicklas Nordborg]

(In [7295]) References #2043: Activating/deactivating roles on the fly in a login session

Added a "Inactive roles" tab in the "Preferences" dialog. This allows a user to set roles that should be inactive by default after logging in.

[Nicklas Nordborg]

(In [7300]) References #2043: Activating/deactivating roles on the fly in a login session

Updated images in the documentation and added a section about this feature.