SMF1.1:Permissions: Difference between revisions From Online Manual

Jump to: navigation, search
(→‎How do I use a Permission Profile?: This is slightly more wiki-correct)
m (Added to Permissions Category)
 
(29 intermediate revisions by 5 users not shown)
Line 1: Line 1:
From this section, four tabbed pages are available: General Permissions, Board Permissions, Edit Profiles, Post Moderation, Settings
{{versions|versions}}
{{TOCright}}
==General Permissions==
This tabbed page shows a list of all membergroups, along with a few stats. On the right of each membergroup is a checkbox and a <b>modify</b> link.  The checkbox allows the administrator to apply the advanced options to make quick and easy changes to the membergroup permission profiles. The modify link allows the administrator to customize each permission for the usergroup.


===Advanced Options===
In this section, three tabbed pages are available: Permissions by Membergroup, Permissions by Board, and Settings.
These options allow you to quickly make changes to membergroups. To use them, first select one or more membergroups above by checking the box on the same line with the membergroup name.  Then choose to do one of the things listed in the <b>With selection</b> box. When you have completed your selections, use the <b>Set permissions</b> button to make the changes.


For every membergroup selected above:
{{TOCright}}
* <b>Apply pre-defined permission set:</b> Select one of the profile types  from the option list to reset permission profilesto one of these four choices.
*<b>Set permissions like this group:</b> Select the name of one of the membergroups from the option list to reset permission profiles to match the membergroup you select here.
*<b>Add/Clear/Deny permission</b> Select Add permission, Clear Permission or Deny Permission from the option list, then select a permission from the (Select a permission) option list.
===Modify===
Use the Modify link to the right of the membergroup name to individual set one or more permissions for the user.  Please see [[#List of Permissions|List of Permissions]] for more information on all the permissions.


==Board Permissions==
==Permissions by Membergroup==
On this tabbed page, every board is listed, along with the Board Permission Profile applied to it.  
This page shows a list of all membergroups, along with a few statistics. On the right of each membergroup is a checkbox and a '''modify''' link.  The checkbox allows the administrator to apply the advanced options to make quick and easy changes to the membergroup permission profiles. The modify link allows the administrator to customize each permission for the usergroup.
*Selecting the board name will bring you to the board's Boards#Modify_Boards|Modify Boards tabbed page in <i> [[Boards|Administration Center » Boards]]</i> 
*Selecting the name of the Permission Profile on the same line will bring you to the [[#Edit Profiles|Edit Profiles]] page for this profile.
 
A more detailed section, on this, can be found [[Board_Permissions|here]]
 
==Edit Profiles==
This tabbed page provides ways to create new profiles and edit, delete, or rename existing profiles.
===Edit Profiles===
All the existing profiles are listed along with the number of boards using each profile.
From this table is also possible to delete profiles by checking the checkbox on the right corresponding to the profile that should be removed and then selecting the button ''Remove Selected''.
===New Profile===
*'''Profile Name''' - In this box is possible to define the name of the new profile.
*'''Copy Permissions From''' - By selecting one of the existing profiles from this dropdown box the permissions from this profile will be used for the newly created profile.
===Rename===
Most of your profiles can be renamed. Four board permission profiles (Default, No Polls, Reply Only, and Read Only) cannot be renamed.
When the Rename button is selected, all the profiles you have created can be renamed.  Rename one or all of them, and select the <b>Save Changes</b> button.
===Remove Selected===
Any profile you created can be removed.  Four board permission profiles (Default, No Polls, Reply Only, and Read Only) cannot be removed.
Select the check box on the same line as the profile you wish to remove, and select the <b>Remove Selected</b> button.
 
==Post Moderation==
In this section admins can define the actions that require [[Core Features#Post Moderation|Post Moderation]] for each permission profile.
This is a shortcut way of changing some of the permissions in the board permission profiles.
 
The administrator must first select a profile from the option list and select the <b>go</b> button.
For each listed profile, there are four user actions for which post moderation permissions can be set. Each one corresponds to board permissions in the corresponding profile. For each of these user actions, three post moderation options are available.
* [[File:Post_moderation_allow.gif‎]] - Can Create. The members can perform the action without moderation.
*[[File:Post_moderation_moderate.gif‎]] - Can Create but Requires Approval. The members can perform the action, but approval is required before becoming visible to all other members.
*[[File:Post_moderation_deny.gif‎]] - Cannot Create. The member cannot perform the action.
 
 
{| style="width: 100%" cellpadding="5"
! scope="col" style="width:13%;text-align:left" | User Action
! scope="col"style="width:35%" | [[File:Post_moderation_allow.gif‎]]
! scope="col" style="width:35%" | [[File:Post_moderation_moderate.gif‎]]
! scope="col" style="width:17%" | [[File:Post_moderation_deny.gif‎]]
|-
! scope="row" style="text-align:left" | New Topics
|Post new topics, without requiring approval
|Post new topics, but hide until approved
|(neither allowed)
|-
! scope="row" style="text-align:left" | Own Replies
|Post replies to topics, without requiring approval, own topic
|Post replies to topics, but hide until approved, own topic
|(neither allowed)
|-
! scope="row" style="text-align:left" | Any Replies
|Post replies to topics, without requiring approval, any topic
|Post replies to topics, but hide until approved, any topic
|(neither allowed)
|-
! scope="row" style="text-align:left" | Attachments
|Post attachments, but hide until approved
|Post attachments, without requiring approval
|(neither allowed)
|}
 
==Settings==
*'''Membergroups allowed to manage permissions''' - Administrators can select which membergroups are allowed to manage permissions.
*'''Enable the option to deny permissions''' - Once enabled along with granting permissions it will be possible also to deny any permission. Denied permissions are not allowed even if the member belong to another membergroup for which the permission is granted.
*'''Enable permissions for post count based groups''' - Determines whether or not membergroups based on post count can be used to manage permissions.


There are five categories of permissions in a standard SMF install.  Some SMF modifications may add additional permissions to this list. Some modifications may add new categories of permissions.  The first four categories of permissions can be viewed and set on this page.


==List of Permissions==
==List of Permissions==
There are five categories of permissions in a standard SMF install.  Some SMF modifications may add additional permissions to this list. Some modifications may add new categories of permissions.
The Board permissions are different from the other four categories of permissions. This is because any forum may have several boards, and membergroups may have different permissions on different boards.  Each Board Permission Profile is a list of the entire set of Board Permissions for each membergroup.
The other four categories of permissions are only seen and set in the [[#General_Permissions|Administration Center » Permissions » General Permissions]]tabbed page. They are not part of the Board Permission Profiles.


===General===
===General===
*'''View forum statistics''' - The collected statistics of an SMF forum that can be found in the Info Center
*'''View forum statistics''' - The collected statistics of an SMF forum that can be found in the Info Center
*'''View the memberlist''' - A list of all registered members of an SMF forum. It can be found in the Info Center
*'''View the memberlist''' - A list of all registered members of an SMF forum. It can be found in the Info Center
*'''View Who's Online -''' A summary of who's on an SMF forum, and it can be found in the Info Center
*'''View Who's Online''' - A summary of who's on an SMF forum, and it can be found in the Info Center
*'''Search for posts and topics -''' Allows users to search the forums using keywords and phrases. Can be found in the navigation bar.
*'''Search for posts and topics''' - Allows users to search the forums using keywords and phrases. Can be found in the navigation bar.
*'''Change other people's karma -''' Allows users to edit the karma of other users. This displays as +X/-X or +X beside the posts of members, where X is the member's karma totals.
*'''Change other people's karma''' - Allows users to edit the karma of other users. This displays as +X/-X or +X beside the posts of members, where X is the member's karma totals.
===Calendar===
===Calendar===
*'''View the calendar -''' Determines whether or not a user can view the calendar of an SMF forum. It can be found in the navigation bar.
*'''View the calendar''' - Determines whether a user can view the calendar of an SMF forum. It can be found in the navigation bar.
*'''Create events in the calendar -''' Determines whether or not a user can create new events in the calendar.
*'''Create events in the calendar''' - Determines whether a user can create new events in the calendar.
*'''Edit events in the calendar -''' Determines whether or not a user can edit events in the calendar.
*'''Edit events in the calendar''' - Determines whether a user can edit events in the calendar.
===Forum Administration===
===Forum Administration===
*'''Administrate forum and database -''' Determines whether or not a user can change database connection properties, edit server settings, etc.
*'''Administrate forum and database''' - Determines whether a user can change database connection properties, edit server settings, and perform other administrative functions.
*'''Manage boards and categories -''' Determines whether or not users can create, modify, and/or delete boards and categories.
*'''Manage boards and categories''' - Determines whether users can create, modify, and/or delete boards and categories.
*'''Manage attachments and avatars -''' Determines whether or not users can manage and delete attachments on the forum.
*'''Manage attachments and avatars''' - Determines whether users can manage and delete attachments on the forum.
*'''Manage smileys -''' Determines whether or not a user can change smiley sets, delete smileys, and change smiley options.
*'''Manage smileys''' - Determines whether a user can change smiley sets, delete smileys, and change smiley options.
*'''Edit news -''' Determines whether or not a user can edit the forum's news.
*'''Edit news''' - Determines whether a user can edit the forum's news.
===Member administration===
===Member administration===
*'''Moderate forum members -''' Determines whether or not a user can register users manually, track IP addresses, online status, etc.
*'''Moderate forum members''' - Determines whether a user can register users manually, track IP addresses, online status, etc.
*'''Manage and assign membergroups -''' Determines whether or not users can create, manage, or delete membergroups.
*'''Manage and assign membergroups''' - Determines whether users can create, manage, or delete membergroups.
*'''Manage permissions -''' Determines whether or not users can manage member permissions.
*'''Manage permissions''' - Determines whether users can manage member permissions.
*'''Manage ban list -''' Determines whether or not a user can ban other members and/or discontinue bans.
*'''Manage ban list''' - Determines whether a user can ban other members and/or discontinue bans.
*'''Send a forum email to members -''' Determines whether or not a user can send an e-mail in bulk to all members or individual membergroups; this keeps the users from having to reveal their own e-mail addresses.
*'''Send a forum email to members''' - Determines whether a user can send an e-mail in bulk to all members or individual membergroups; this keeps the users from having to reveal their own e-mail addresses.
'''Personal Messaging'''
===Personal Messaging===
'''Read personal messages -''' Determines whether or not a user can view personal messages sent to him or her.
*'''Read personal messages''' - Determines whether a user can view personal messages sent to him or her.
*'''Send personal messages -''' Determines whether or not a user can send personal messages to other members.
*'''Send personal messages''' - Determines whether a user can send personal messages to other members.
===Member Profiles===
===Member Profiles===
*'''View profile summary and stats -''' Determines whether or not a user can view profile summaries and member stats.
*'''View profile summary and stats''' - Determines whether a user can view profile summaries and member stats.
*'''Edit account settings -''' Determines whether or not a user can edit their own account's settings as well as the account settings of all members.
*'''Edit account settings''' - Determines whether a user can edit their own account's settings as well as the account settings of all members.
*'''Edit additional profile settings -'''Determines whether or not users can edit individual forum preferences such as their avatar, theme preferences, notifications and Personal Message settings. If this is not checked, the user will be forced to use the default settings
*'''Edit additional profile settings''' - Determines whether users can edit individual forum preferences such as their avatar, theme preferences, notifications and Personal Message settings. If this is not checked, the user will be forced to use the default settings
*'''Edit custom title -''' Determines whether or not users can edit their custom titles.
*'''Edit custom title''' - Determines whether users can edit their custom titles.
*'''Delete account-''' Determines whether or not a member can delete their account or other members' accounts.
*'''Delete account''' - Determines whether a member can delete their account or other members' accounts.
*'''Select an avatar from the server -''' Determines whether or not a user can select an avatar from the avatars uploaded on the forum.
*'''Select an avatar from the server''' - Determines whether a user can select an avatar from the avatars uploaded on the forum.
*'''Upload an avatar to the server -''' Determines whether or not a user can upload their personal avatar to the server.
*'''Upload an avatar to the server''' - Determines whether a user can upload their personal avatar to the server.
*'''Choose a remotely stored avatar -''' Determines if a user can use an avatar from another server or site.
*'''Choose a remotely stored avatar''' - Determines if a user can use an avatar from another server or site.


===Board Permissions===
The board permissions are different from the other four categories of permissions. This is because any forum may have several boards, and membergroups may have different permissions on different boards. Each Board Permission Profile is a list of the entire set of Board Permissions for each membergroup. The board permissions can be accessed from this page, and for each board via the Permissions by Board tab (see below).
====General====
*'''Moderate board''' - Determines whether or not people in this [[membergroup]] can moderate the boards they have access to.
====Topics====
*'''Post new topics''' - Determines whether or not people in this membergroup can post new topics.
*'''Merge any topic''' - Determines whether or not people in this membergroup can merge topics.
*'''Split any topic''' - Determines whether or not people in this membergroup can split topics.
*'''Send topics to friends''' - Determines whether or not people in this membergroup can send topics to their friends via email.
*'''Make topics sticky''' - Determines whether or not people in this membergroup can make some topics [[sticky]] topics.
*'''Move topic''' - Determines whether or not people in this membergroup can move their own topics, all topics, or no topics at all.
*'''Lock topics''' - Determines whether or not people in this membergroup can [[locked topic|lock]] their own topics, all topics, or no topics at all.
*'''Remove topics''' - Determines whether or not people in this membergroup can remove their own topics, all topics, or no topics at all.
*'''Post replies to topics''' - Determines whether or not people in this membergroup can [[Post]] replies to their own topics, all topics, or no topics at all.
*'''Modify replies to own topics''' - Determines whether or not people in this membergroup can modify replies to their own topics.
*'''Delete replies to own topics''' - Determines whether or not people in this membergroup can delete replies to their own topics.
*'''Announce topic''' - Determines whether or not people in this membergroup can announce (send topic by email or private message) their topics.


====Posts====
==Board Permissions==
*'''Delete posts''' - Determines whether or not people in this membergroup can delete their own posts, all posts, or no posts at all.
===General===
*'''Modify posts''' - Determines whether or not people in this membergroup can modify their own posts, all posts, or no posts at all.
*'''Moderate board''' - Determines whether users in this membergroup can moderate the boards they have access to. With this permission users can reply to locked topics, change poll expiration time and view poll results.
*'''Report posts to the moderators''' - Determines whether or not people in this membergroup will be able to report posts to the forum moderators that receive forum notifications.
===Topics===
====Polls====
*'''Post new topics''' - Determines whether users in this membergroup can post new topics.
*'''View polls''' - Determines whether or not people in this membergroup will be able to view polls.
*'''Merge any topic''' - Determines whether users in this membergroup can merge topics.
*'''Vote in polls''' - Determines whether or not people in this membergroup will be able to vote in polls they can see.
*'''Split any topic''' - Determines whether users in this membergroup can split topics.
*'''Post Polls''' - Determines whether or not people in this membergroup will be able to make their own polls.
*'''Send topics to friends''' - Determines whether users in this membergroup can send topics to their friends via email.
*'''Add [[poll]] to topics''' - Determines whether or not people in this membergroup are allowed to add polls to existing topics. The forum admins can choose whether they must have posted the topic, or if they can add it to any [[Topic]] they can see.
*'''Make topics sticky''' - Determines whether users in this membergroup can make some topics [[sticky]] topics.
*'''Edit polls''' - Determines whether or not people in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. In order to edit the maximum number of votes and the expiration time a user needs to have the 'Moderate board' permission.
*'''Move topic''' - Determines whether users in this membergroup can move their own topics, all topics, or no topics at all.
*'''Lock polls''' - Determines whether or not people in this membergroup can lock their own polls, any polls, or no polls at all.
*'''Lock topics''' - Determines whether users in this membergroup can [[locked topic|lock]] their own topics, all topics, or no topics at all.
*'''Remove polls''' - Determines whether or not people in this membergroup can remove their own polls, any polls, or no polls at all.
*'''Remove topics''' - Determines whether users in this membergroup can remove their own topics, all topics, or no topics at all.
====Notifications====
*'''Post replies to topics''' - Determines whether users in this membergroup can [[Post]] replies to their own topics, all topics, or no topics at all.
*'''Request notification on replies''' - Determines whether or not people in this membergroup will be able to request notification on replies to topics they select.
*'''Modify replies to own topics''' - Determines whether users in this membergroup can modify replies to their own topics.
*'''Request notification on new topics''' - Determines whether or not people in this membergroup will be able to request notification when new topics get posted in a board.
*'''Delete replies to own topics''' - Determines whether users in this membergroup can delete replies to their own topics.
*'''Announce topic''' - Determines whether users in this membergroup can announce (send topic by email or private message) their topics.
===Posts===
*'''Delete posts''' - Determines whether users in this membergroup can delete their own posts, all posts, or no posts at all.
*'''Modify posts''' - Determines whether users in this membergroup can modify their own posts, all posts, or no posts at all.
*'''Report posts to the moderators''' - Determines whether users in this membergroup will be able to report posts to the forum moderators that receive forum notifications.
===Polls===
*'''View polls''' - Determines whether users in this membergroup will be able to view polls.
*'''Vote in polls''' - Determines whether users in this membergroup will be able to vote in polls they can see.
*'''Post Polls''' - Determines whether users in this membergroup will be able to make their own polls.
*'''Add [[poll]] to topics''' - Determines whether users in this membergroup are allowed to add polls to existing topics. The forum admins can choose whether they must have posted the topic, or if they can add it to any [[Topic]] they can see.
*'''Edit polls''' - Determines whether users in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. In order to edit the maximum number of votes and the expiration time a user needs to have the 'Moderate board' permission.
*'''Lock polls''' - Determines whether users in this membergroup can lock their own polls, any polls, or no polls at all.
*'''Remove polls''' - Determines whether users in this membergroup can remove their own polls, any polls, or no polls at all.
===Notifications===
*'''Request notification on replies''' - Determines whether users in this membergroup will be able to request notification on replies to topics they select.
*'''Request notification on new topics''' - Determines whether users in this membergroup will be able to request notification when new topics get posted in a board.
===Attachments===
===Attachments===
*'''View Attachments''' - Determines whether or not people in this membergroup can view attachments.
*'''View Attachments''' - Determines whether users in this membergroup can view attachments.
*'''Post Attachments''' - Determines whether or not people in this [[membergroup]] can [[Post]] attachments on topics.
*'''Post Attachments''' - Determines whether users in this membergroup can post attachments on topics.


==Permission Profiles==
==Permissions by Board==
'''This tab is only visible if Enable advanced by board permissions has been enabled'''.
On this page, every board is listed, with its board permission profile.  If you do not want to use the '''Global''' permissions for a particular board, you must click on the '''Local''' link underneath '''Switch To'''.  Clicking this will take you to that board's [[Boards#Modify_Boards|Modify Boards]] page.  You can then modify the permissions for membergroup profiles for that board, and use the following drop down menus:
*Apply pre-defined permission profile - These allow you to use the 'default' permission set-ups.
*Set permissions like this group - These allow you to use the permissions from an existing membergroup.
*Add/Clear permission - Allows you to select a permission to add to this board.


The Permission Profile page of the Permissions section of the Administration Panel is used to configure permission profiles for your forum.
A more detailed section on this subject can be found at [[Board Permissions]]


'''Note that the local per board permissions only apply to one board.  They cannot be re-used.'''


===Why should I use a permission profile?===
==Settings==
A Permission profile is useful in cases where you want to limit a user group from having a certain permission in a certain board or boards. A permission profile can also be used to limit a specific user in the same way given that the user is added to a new group that takes advantage of the change in the profile.
*'''Membergroups allowed to manage permissions''' - Administrators can select which membergroups are allowed to manage permissions.
*'''Enable the option to deny permissions''' - Once enabled along with granting permissions it will be possible also to deny any permission. Denied permissions are not allowed even if the member belong to another membergroup for which the permission is granted.
*'''Enable permissions for post count based groups''' - Determines whether membergroups based on post count can be used to manage permissions.
*'''Enable advanced by board permissions''' - Ticking this box allows the Permissions by Board tab to be visible.


==About Permissions==


===What is a permission profile?===
===Options===
A Permission profile is essentially a "Profile" of permissions configurations for your membergroups. Permission profiles only contain board related permissions, You can assign whatever permission profile you want to each of your boards. A board that opts to use a certain profile will have membergroups obtain the permissions that the profile grants for each group to have. A default "global" permission profile is assigned to boards that don't have their own custom permission profile assigned to it.
SMF's permissions are so powerful because they can be set for each individual permission to three options rather than just on or off.
*'''A''' - This option gives user current permission
*'''X''' - This option does not give the user current permission
*'''D''' - This option denies the user current permission


Things get really interesting when a user belongs to two or more membergroups with different options (A, X or D) for the same permission.


===The Permission Profile Entrance Page===
===Member Belongs to Two Membergroups===
As you enter the Permission Profiles page you will see two tables.
In this example a member belongs to '''only''' 2 different membergroups with different options for some permissions:


The table at the top list the names of all of the permission profiles that already exist on your forum. To edit the permissions for a profile, simply select the name of the profile you wish to edit. You will also see a Delete checkbox next to permission profiles that you added yourself (not built in) that you can select to delete the profile as long as it is not used by a board currently.
{| border="1" style="text-align:center"


The table below that is used to create a new permission profile. You can input the name you want to give the permission profile in the Profile Name field. Below that you can copy the membergroup permissions configuration from another profile by selecting a profile in the selection box labeled Copy Permissions From. If you leave the selection at Default, the profile will start off with the same permissions that are used for your global board permissions.
!permissions!! option from group A !! option from group B !! Result for permission !! explanation
 
|-
===Editing Permission Profile Permissions===
! permission 1
Upon name of the permission profile you will be taken to a page that looks just like the default page you are taken to when you go to the Permissions section of your Administration Panel. However you are editing permissions for a completely different profile when you are taken to this page. That is, unless you select the Default built in profile, which would allow you to edit the same "global" permissions from the default permissions page, except it would be only for board specific permissions.
| A || A || allowed || obviously
 
|-
===How do I use a Permission Profile?===
! permission 2
Once you have created your profile, modify the board you want to apply the profile to and select the profile from the Permission Profile drop down.
| A || X || allowed || A wins X
|-
! permission 3
| A || D || not allowed || D wins A
|-
! permission 4
| X || X || not allowed || obvious too
|-
! permission 2
| X || D || not allowed || D wins X
|-
! permission 3
| D || D || not allowed || is this obvious or what?
|}


Further information about permission profile(s) can be found at [[Board_Permissions]]
In short: D wins A which wins X


{{As an administrator}}
===Member Belongs to Three or More Membergroups===
*If you want a permission to be allowed, then you must have option A in at least one group and no D.
*If you want a permission to be disallowed, then you must have all options X, or
*If you want a permission to be disallowed, you must have option D in at least one group. It does not matter if other options are A or X.
You should not use D too much. Its a good idea to use special private membergroups  just to Deny some permissions. If you don't want some members to use e.g. private messages, you can set up a private membergroup with a descriptive name like "no-pm" and for that membergroup, set the permissions for pm to D. Every member of that group is not allowed pm's regardless of the other groups they belong. If you change your mind about that setting you can find easily which membergroup restricts PMs and reset it.


[[Category:permissions]]
{{ {{Localized|As an administrator1.1}}}}
[[Category:Permissions]]

Latest revision as of 15:46, 7 October 2016

Please see SMF1.1:Permissions or SMF2.0:Permissions depending on the version of SMF you are using.

In this section, three tabbed pages are available: Permissions by Membergroup, Permissions by Board, and Settings.

Permissions by Membergroup

This page shows a list of all membergroups, along with a few statistics. On the right of each membergroup is a checkbox and a modify link. The checkbox allows the administrator to apply the advanced options to make quick and easy changes to the membergroup permission profiles. The modify link allows the administrator to customize each permission for the usergroup.

There are five categories of permissions in a standard SMF install. Some SMF modifications may add additional permissions to this list. Some modifications may add new categories of permissions. The first four categories of permissions can be viewed and set on this page.

List of Permissions

General

  • View forum statistics - The collected statistics of an SMF forum that can be found in the Info Center
  • View the memberlist - A list of all registered members of an SMF forum. It can be found in the Info Center
  • View Who's Online - A summary of who's on an SMF forum, and it can be found in the Info Center
  • Search for posts and topics - Allows users to search the forums using keywords and phrases. Can be found in the navigation bar.
  • Change other people's karma - Allows users to edit the karma of other users. This displays as +X/-X or +X beside the posts of members, where X is the member's karma totals.

Calendar

  • View the calendar - Determines whether a user can view the calendar of an SMF forum. It can be found in the navigation bar.
  • Create events in the calendar - Determines whether a user can create new events in the calendar.
  • Edit events in the calendar - Determines whether a user can edit events in the calendar.

Forum Administration

  • Administrate forum and database - Determines whether a user can change database connection properties, edit server settings, and perform other administrative functions.
  • Manage boards and categories - Determines whether users can create, modify, and/or delete boards and categories.
  • Manage attachments and avatars - Determines whether users can manage and delete attachments on the forum.
  • Manage smileys - Determines whether a user can change smiley sets, delete smileys, and change smiley options.
  • Edit news - Determines whether a user can edit the forum's news.

Member administration

  • Moderate forum members - Determines whether a user can register users manually, track IP addresses, online status, etc.
  • Manage and assign membergroups - Determines whether users can create, manage, or delete membergroups.
  • Manage permissions - Determines whether users can manage member permissions.
  • Manage ban list - Determines whether a user can ban other members and/or discontinue bans.
  • Send a forum email to members - Determines whether a user can send an e-mail in bulk to all members or individual membergroups; this keeps the users from having to reveal their own e-mail addresses.

Personal Messaging

  • Read personal messages - Determines whether a user can view personal messages sent to him or her.
  • Send personal messages - Determines whether a user can send personal messages to other members.

Member Profiles

  • View profile summary and stats - Determines whether a user can view profile summaries and member stats.
  • Edit account settings - Determines whether a user can edit their own account's settings as well as the account settings of all members.
  • Edit additional profile settings - Determines whether users can edit individual forum preferences such as their avatar, theme preferences, notifications and Personal Message settings. If this is not checked, the user will be forced to use the default settings
  • Edit custom title - Determines whether users can edit their custom titles.
  • Delete account - Determines whether a member can delete their account or other members' accounts.
  • Select an avatar from the server - Determines whether a user can select an avatar from the avatars uploaded on the forum.
  • Upload an avatar to the server - Determines whether a user can upload their personal avatar to the server.
  • Choose a remotely stored avatar - Determines if a user can use an avatar from another server or site.

The board permissions are different from the other four categories of permissions. This is because any forum may have several boards, and membergroups may have different permissions on different boards. Each Board Permission Profile is a list of the entire set of Board Permissions for each membergroup. The board permissions can be accessed from this page, and for each board via the Permissions by Board tab (see below).

Board Permissions

General

  • Moderate board - Determines whether users in this membergroup can moderate the boards they have access to. With this permission users can reply to locked topics, change poll expiration time and view poll results.

Topics

  • Post new topics - Determines whether users in this membergroup can post new topics.
  • Merge any topic - Determines whether users in this membergroup can merge topics.
  • Split any topic - Determines whether users in this membergroup can split topics.
  • Send topics to friends - Determines whether users in this membergroup can send topics to their friends via email.
  • Make topics sticky - Determines whether users in this membergroup can make some topics sticky topics.
  • Move topic - Determines whether users in this membergroup can move their own topics, all topics, or no topics at all.
  • Lock topics - Determines whether users in this membergroup can lock their own topics, all topics, or no topics at all.
  • Remove topics - Determines whether users in this membergroup can remove their own topics, all topics, or no topics at all.
  • Post replies to topics - Determines whether users in this membergroup can Post replies to their own topics, all topics, or no topics at all.
  • Modify replies to own topics - Determines whether users in this membergroup can modify replies to their own topics.
  • Delete replies to own topics - Determines whether users in this membergroup can delete replies to their own topics.
  • Announce topic - Determines whether users in this membergroup can announce (send topic by email or private message) their topics.

Posts

  • Delete posts - Determines whether users in this membergroup can delete their own posts, all posts, or no posts at all.
  • Modify posts - Determines whether users in this membergroup can modify their own posts, all posts, or no posts at all.
  • Report posts to the moderators - Determines whether users in this membergroup will be able to report posts to the forum moderators that receive forum notifications.

Polls

  • View polls - Determines whether users in this membergroup will be able to view polls.
  • Vote in polls - Determines whether users in this membergroup will be able to vote in polls they can see.
  • Post Polls - Determines whether users in this membergroup will be able to make their own polls.
  • Add poll to topics - Determines whether users in this membergroup are allowed to add polls to existing topics. The forum admins can choose whether they must have posted the topic, or if they can add it to any Topic they can see.
  • Edit polls - Determines whether users in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. In order to edit the maximum number of votes and the expiration time a user needs to have the 'Moderate board' permission.
  • Lock polls - Determines whether users in this membergroup can lock their own polls, any polls, or no polls at all.
  • Remove polls - Determines whether users in this membergroup can remove their own polls, any polls, or no polls at all.

Notifications

  • Request notification on replies - Determines whether users in this membergroup will be able to request notification on replies to topics they select.
  • Request notification on new topics - Determines whether users in this membergroup will be able to request notification when new topics get posted in a board.

Attachments

  • View Attachments - Determines whether users in this membergroup can view attachments.
  • Post Attachments - Determines whether users in this membergroup can post attachments on topics.

Permissions by Board

This tab is only visible if Enable advanced by board permissions has been enabled. On this page, every board is listed, with its board permission profile. If you do not want to use the Global permissions for a particular board, you must click on the Local link underneath Switch To. Clicking this will take you to that board's Modify Boards page. You can then modify the permissions for membergroup profiles for that board, and use the following drop down menus:

  • Apply pre-defined permission profile - These allow you to use the 'default' permission set-ups.
  • Set permissions like this group - These allow you to use the permissions from an existing membergroup.
  • Add/Clear permission - Allows you to select a permission to add to this board.

A more detailed section on this subject can be found at Board Permissions

Note that the local per board permissions only apply to one board. They cannot be re-used.

Settings

  • Membergroups allowed to manage permissions - Administrators can select which membergroups are allowed to manage permissions.
  • Enable the option to deny permissions - Once enabled along with granting permissions it will be possible also to deny any permission. Denied permissions are not allowed even if the member belong to another membergroup for which the permission is granted.
  • Enable permissions for post count based groups - Determines whether membergroups based on post count can be used to manage permissions.
  • Enable advanced by board permissions - Ticking this box allows the Permissions by Board tab to be visible.

About Permissions

Options

SMF's permissions are so powerful because they can be set for each individual permission to three options rather than just on or off.

  • A - This option gives user current permission
  • X - This option does not give the user current permission
  • D - This option denies the user current permission

Things get really interesting when a user belongs to two or more membergroups with different options (A, X or D) for the same permission.

Member Belongs to Two Membergroups

In this example a member belongs to only 2 different membergroups with different options for some permissions:

permissions option from group A option from group B Result for permission explanation
permission 1 A A allowed obviously
permission 2 A X allowed A wins X
permission 3 A D not allowed D wins A
permission 4 X X not allowed obvious too
permission 2 X D not allowed D wins X
permission 3 D D not allowed is this obvious or what?

In short: D wins A which wins X

Member Belongs to Three or More Membergroups

  • If you want a permission to be allowed, then you must have option A in at least one group and no D.
  • If you want a permission to be disallowed, then you must have all options X, or
  • If you want a permission to be disallowed, you must have option D in at least one group. It does not matter if other options are A or X.

You should not use D too much. Its a good idea to use special private membergroups just to Deny some permissions. If you don't want some members to use e.g. private messages, you can set up a private membergroup with a descriptive name like "no-pm" and for that membergroup, set the permissions for pm to D. Every member of that group is not allowed pm's regardless of the other groups they belong. If you change your mind about that setting you can find easily which membergroup restricts PMs and reset it.




Main

Configuration

Forum

Members

Maintenance

Miscellaneous

Retrieved from "https://wiki.simplemachines.org/w/index.php?title=SMF1.1:Permissions&oldid=30921"


Advertisement: