Groups and permissions



  • My goal is to have the following permissions

    1. Admin group (system)
    2. A group of moderators, who can post/moderate any forum
    3. A group that has restricted access (can't find certain categories) =/= registered-users.
    4. Guest (system) has no access whatsoever to nodebb
    5. ALL other users (newly registered, no other group assigned) have restricted access to specific forums (but different access than #3).

    By default, all users would be in #5 unless assigned to 1-3.

    How can I do this?

    Another question: when I go to chats > see all chats there is nothing listed under "Contacts". How do I add users here? Isn't there a way to "compose" a new message and type in the recipient and have it autocomplete (like on gmail, facebook, most email clients) instead of navigating to the user/list of members and message them from there?


  • Plugin & Theme Dev

    @adriangb By default all new users will be assigned to "registered-users" system group. This will be your #5.

    Create new groups for #2 and #3.

    Permissions for groups can be set in ACP > Manage > Categories. Click on "Edit" for a category and you can set the permissions accordingly.

    Screen Shot 2015-05-26 at 2.30.17 PM.png



  • Yeah I get that, but there's the implicit permission thing. If I want registered-users to be able to post in a category but not #3 I can't do that. Because #3 is also a part of registered-users, it automatically sets the implicit permissions (the half filled checkbox).
    #3 is Alumni
    #2 is Moderators
    upload-8dacf4a6-aba4-4b32-954a-1af8ffa7f0a5

    In this case I would like registered-users to be able to find and view the category (but not post) while Alumni is unable to view or find the category.


  • Admin

    If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.



  • @baris said:

    If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.

    Then I would have to manually add new users to the new group (let's say "Members"), right?


  • Admin

    @adriangb Yes or you could write a simple plugin that does that automatically on user register.


  • Admin

    Yeah, @baris is correct, the privilege system is a whitelist, as opposed to a blacklist, and registered-users encompasses all users as they are automatically added to that group on registration.



  • Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.



  • Also turns out the "Users" button in the header is openable by guests, which I need to block.


  • Global Moderator

    @adriangb said:

    Also turns out the "Users" button in the header is openable by guests, which I need to block.

    Go into the ACP and tick make user info private. Blocks it until you're logged in.


  • Plugin & Theme Dev

    @adriangb said:

    Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.

    try this... quickly hacked from my nodebb-plugin-newuser-approval plugin
    nodebb-plugin-assign-newuser-to-group


Log in to reply
 


Looks like your connection to NodeBB was lost, please wait while we try to reconnect.