Hi @Jenkler! Long time no see 😁
I don't think we can do this right now, since visibility is handled on the category level.
It could likely be done in a plugin though, to enforce visibility on a per topic level ..
Groups and permissions
-
My goal is to have the following permissions
- Admin group (system)
- A group of moderators, who can post/moderate any forum
- A group that has restricted access (can't find certain categories) =/= registered-users.
- Guest (system) has no access whatsoever to nodebb
- ALL other users (newly registered, no other group assigned) have restricted access to specific forums (but different access than #3).
By default, all users would be in #5 unless assigned to 1-3.
How can I do this?
Another question: when I go to chats > see all chats there is nothing listed under "Contacts". How do I add users here? Isn't there a way to "compose" a new message and type in the recipient and have it autocomplete (like on gmail, facebook, most email clients) instead of navigating to the user/list of members and message them from there?
-
@adriangb By default all new users will be assigned to "registered-users" system group. This will be your #5.
Create new groups for #2 and #3.
Permissions for groups can be set in ACP > Manage > Categories. Click on "Edit" for a category and you can set the permissions accordingly.
-
Yeah I get that, but there's the implicit permission thing. If I want registered-users to be able to post in a category but not #3 I can't do that. Because #3 is also a part of registered-users, it automatically sets the implicit permissions (the half filled checkbox).
#3 is Alumni
#2 is Moderators
In this case I would like registered-users to be able to find and view the category (but not post) while Alumni is unable to view or find the category.
-
If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.
-
@baris said:
If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.
Then I would have to manually add new users to the new group (let's say "Members"), right?
-
@adriangb Yes or you could write a simple plugin that does that automatically on user register.
-
Yeah, @baris is correct, the privilege system is a whitelist, as opposed to a blacklist, and
registered-usersencompasses all users as they are automatically added to that group on registration. -
Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.
-
Also turns out the "Users" button in the header is openable by guests, which I need to block.
-
@adriangb said:
Also turns out the "Users" button in the header is openable by guests, which I need to block.
Go into the ACP and tick make user info private. Blocks it until you're logged in.
-
@adriangb said:
Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.
try this... quickly hacked from my nodebb-plugin-newuser-approval plugin
nodebb-plugin-assign-newuser-to-group
