Groups and permissions

[adriangb]

My goal is to have the following permissions

1. Admin group (system)
2. A group of moderators, who can post/moderate any forum
3. A group that has restricted access (can't find certain categories) =/= registered-users.
4. Guest (system) has no access whatsoever to nodebb
5. ALL other users (newly registered, no other group assigned) have restricted access to specific forums (but different access than #3).

By default, all users would be in #5 unless assigned to 1-3.

How can I do this?

Another question: when I go to chats > see all chats there is nothing listed under "Contacts". How do I add users here? Isn't there a way to "compose" a new message and type in the recipient and have it autocomplete (like on gmail, facebook, most email clients) instead of navigating to the user/list of members and message them from there?

[pichalite]

@adriangb By default all new users will be assigned to "registered-users" system group. This will be your #5.

Create new groups for #2 and #3.

Permissions for groups can be set in ACP > Manage > Categories. Click on "Edit" for a category and you can set the permissions accordingly.

[adriangb]

Yeah I get that, but there's the implicit permission thing. If I want registered-users to be able to post in a category but not #3 I can't do that. Because #3 is also a part of registered-users, it automatically sets the implicit permissions (the half filled checkbox).
#3 is Alumni
#2 is Moderators

In this case I would like registered-users to be able to find and view the category (but not post) while Alumni is unable to view or find the category.

[baris]

If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.

[adriangb]

@baris said:

If you want Alumni to not view/find you need to remove the view find from registered-users and give each group you want the explict view/find permission.

Then I would have to manually add new users to the new group (let's say "Members"), right?

[baris]

@adriangb Yes or you could write a simple plugin that does that automatically on user register.

[julian]

Yeah, @baris is correct, the privilege system is a whitelist, as opposed to a blacklist, and registered-users encompasses all users as they are automatically added to that group on registration.

[adriangb]

Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.

[adriangb]

Also turns out the "Users" button in the header is openable by guests, which I need to block.

[a_5mith]

@adriangb said:

Also turns out the "Users" button in the header is openable by guests, which I need to block.

Go into the ACP and tick make user info private. Blocks it until you're logged in.

[pichalite]

@adriangb said:

Alright, so plugin it is. Is there one that does this out there? I really don't think I have the coding skills for it lol.

try this... quickly hacked from my nodebb-plugin-newuser-approval plugin
nodebb-plugin-assign-newuser-to-group