Announcement

Collapse
No announcement yet.

v403 CMS Permissions

Collapse
X
Collapse
 

  • Edwin Brown
    started a blog post v403 CMS Permissions

    v403 CMS Permissions

    In v402 CMS permissions were additive- each permission granted also granted the lower permissions. So, for example, if you had "Can Use HTML" rights you were also granted all other rights. There were several complaints about this, and it was clear that's not how the community wanted this. Also there were several people who wanted the ability to control access to view/download attachments.

    Therefore we have changed how CMS permissions work. In v403 there are two linkages:
    • If you grant any rights you have granted "view". I think it's fairly obvious that if you want someone to be able to, for example, download attachments that you meant them to be able to view the page.
    • If you grant "Can Use HTML" you have also granted "create" rights. Again, if you meant for someone to be able to enter HTML in an article you must have meant them to be able to create the article.


    Otherwise the rights are separate. So you could, for example, grant "publish" and "view" but nothing else. We also use javascript to display this relationship. So if, for example, you click "create" then the "view" list will be checked. If you uncheck "view" then all the other rights will uncheck.

    permissions..jpg

    • RedFoxy
      #29
      RedFoxy commented
      Editing a comment
      I don't like that type of interface, really! because I've a lot of usergroups and I must do a lot of work to assign right permission in all CMS section (isn't it ereditable?).

      In my forum ( http://www.softairmania.it ) I've:
      - 5 staff groups (Admin, Global Mod, Mod, Editors and Reviewers)
      - 5 vB standard group (registered user, not logged, waiting for email confirmation, COPPA users, banned user)
      - 84 extra groups (each usergroup have specific permissions for differents private subforums)

      And like you can understand, with about 100 usergroups that interface is not really usefull

    • ximcix
      #30
      ximcix commented
      Editing a comment
      If a member, who does not have permission to "Use HTML in CMS Content" creates an excellent forum post with some HTML, & I the Admin, have all permissions enabled, clicks "Promote to Article" for that particular post, the HTML is NOT parsed in the article.

      A bit of ironing still needs to be done as far as permissions go.

    • Edwin Brown
      #31
      Edwin Brown commented
      Editing a comment
      Originally posted by RedFoxy;bt8219
      I don't like that type of interface, really! because I've a lot of usergroups and I must do a lot of work to assign right permission in all CMS section (isn't it ereditable?).

      In my forum ( http://www.softairmania.it ) I've:
      - 5 staff groups (Admin, Global Mod, Mod, Editors and Reviewers)
      - 5 vB standard group (registered user, not logged, waiting for email confirmation, COPPA users, banned user)
      - 84 extra groups (each usergroup have specific permissions for differents private subforums)

      And like you can understand, with about 100 usergroups that interface is not really usefull
      We've got dropdowns at the top so you can set default permissions for everyone with a total of five five dropdowns. We use inheritance so you can set permissions everywhere but only where you want permissions to change. What kind of an interface would you like?
    Posting comments is disabled.

Related Topics

Collapse

Working...
X