Permission system change

NodeBB Development
  • tldr

    Permission system changed. After upgrading to 0.6.0 check your group permissions to make sure they are correct.

    Long version

    This is not really a breaking change so I am just posting here.

    Related GH issues and

    Previously if no options were ticked in the manage>categories permission dropdown it meant registered users can find, read, post topics and replies while guests could only find, read but can't create topics or reply. This was confusing as all the checkboxes were unticked. Also as soon as you ticked the permission for one group the other groups lost that permission.

    From now on what you see in the permission drop down is what you get. If all checkboxes are unticked no group has permissions, if only one of them is ticked only that group has permissions and so on. Administrators are an exception so even if you remove their tick in the dropdown they can still access and post, so I'm not sure why we have admins in that dropdown ๐Ÿ˜†

    On a new install NodeBB will give all permissions to administrators and registered-users groups. When you create a new group from the ACP that group will not have any permissions so it is up to the forum admin to assign proper permissions.

    The upgrade script will go through all categories and groups and assign permissions if there are no permissions set. This is to mimic the previous behaviour. So after upgrading to 0.6.0 you should go through your categories and make sure correct permissions are set for guests and possibly double check other groups.

    Related commit

  • Excellent. This makes much more sense ๐Ÿ˜„

  • Thanks for doing this @baris ๐Ÿ‘ -- hopefully we won't get complaints that it is confusing anymore ๐Ÿ˜„

    As for why administrators is there, they only apply if you want to give admins read/write rights to a category that nobody else has, like a secret forum for admins only :shipit:

  • Well I think those settings don't have any effect because of the other admin checks we have in here :

    If the user is an admin or mod for that category then the group permissions don't matter for them.

Suggested Topics