Ban single Users from Category

[Florian Müller]

Good morning,

I'm looking for a way of banning a single user from one specific category.
So far it looks like the permission system only has two states, allowed or undefined, but no forbidden.

I tried different things:

• Adding that user on the category permissions directly, removing everything except Find/Access, but then the permissions for registered-users kick in and allow writing again.
• Adding a second group with that user to that category with limited permissions - see above, same problem
• Same as previous option, but with removing that user from registered-users - works but...

... we have round about 150 categories, adding a new group to all of them is a lot of work. Also I'm not sure if removing a user from registered-users is a good idea.

Is there a nicer way to reach my goal?

[julian]

@Florian-Müller Unfortunately, privilege are additive, as you've discovered. This means if that troublesome user is in the registered users group, they can still access it.

I'd recommend not removing them from that group

[Florian Müller]

@julian Do you see an easy/nice way how to solve this problem?

[oPignonLibre]

@Florian-Müller said in Ban single Users from Category:

@julian Do you see an easy/nice way how to solve this problem?

A not very practical way would be to create a group for each category. Unless you write a plugin or script to ease the pain of management it will be headache inducing.