All about permission profiles: Difference between revisions From Online Manual

Jump to: navigation, search
No edit summary
mNo edit summary
Line 1: Line 1:
Permission profile is short for board permission profile.  In SMF 2 and later, you use a board permission profile to control precisely who can post, add attachments, moderate, etc. on each and every board on your forum. If you use SMF 1.1.x, please read about [[Local Board Permissions for SMF 1.1.x|local board permissions]] instead.
Permission profile is short for board permission profile.  In SMF 2.0.x and later, you use a board permission profile to control precisely who can post, add attachments, or moderate on each and every board on your forum. If you use SMF 1.1.x, please read about [[Local Board Permissions for SMF 1.1.x|local board permissions]] instead.


Permission profiles describe, for each member group, what that member group is allowed to do. Every board on your forum uses just one permission profile.  If you don't pick a board permission profile for a board then SMF will use the default board permission profile for that board.  Board permission profiles do not control who can see a board; for more on this, please read [[what members are allowed to see and do]].   
Permission profiles describe, for each membergroup, what that membergroup is allowed to do. Every board on your forum uses just one permission profile.  If you do not pick a board permission profile for a board, SMF will use the default board permission profile for that board.  Board permission profiles do not control who can see a board; for more on this, please read [[what members are allowed to see and do]].   


When you are setting up custom board permission profiles, you need to keep two things in mind.
When you are setting up custom board permission profiles, you need to keep two things in mind:
# For each board, pick the permission profile you want to use for that board (or stick with the '''default''' profile).
# For each board, pick the permission profile you want to use for that board (or stick with the '''default''' profile).
# Make changes to a permission profile, or create a new one.
# Make changes to a permission profile, or create a new one.
Line 10: Line 10:


==Choose the permission profile for a board==
==Choose the permission profile for a board==
To see which boards are using which profiles, go to Administration Center » Permissions » Board Permissions  
To see which boards are using which profiles, go to ''Administration Center » Permissions » Board Permissions''. This shows a list of all the boards on your forum, ordered by category, board, and child board.  For each board, there is a profile name.  Click on the Board Name to modify the board and choose a different board Permission Profile from the drop-down list.
This is a list of all your boards, ordered by category, board, and child board.  For each board, there is a profile name.  Click on the Board Name to modify the board and choose a different board '''Permission Profile''' from the drop-down list.


==Change a board permission profile or create a new one==
==Change a board permission profile or create a new one==
===See or edit permissions for a profile===
===See or edit permissions for a profile===
Go to Administration Center » Permissions » Edit Profiles and click on a '''Permission Profile''' name.  You will see the profile name and a list of member group names, some statistics, a link to "modify permissions", and a check-box. Below this list, there is a set of Advanced Options.
Go to ''Administration Center » Permissions » Edit Profiles'' and click on a '''Permission Profile''' name.  You will see the profile name and a list of member group names, some statistics, a link to "modify permissions", and a check-box. Below this list, there is a set of Advanced Options.


Caution: remember that whenever you modify membergroup permissions within a board permission profile, you will affect every board that uses this same profile.
Caution: remember that whenever you modify membergroup permissions within a board permission profile, you will affect every board that uses this same profile.
Line 22: Line 21:
Simply click on the member group name. Suppose you already chose the '''Default''' profile. Now choose the '''Guests''' member group. You will now see a page of information titled '''Permissions for group "Guests" in profile "Default"'''.  You see a bunch of check boxes.  If a box is unchecked, that member group does not have that permission in this profile.  If it is checked, the member does have permission in this profile.
Simply click on the member group name. Suppose you already chose the '''Default''' profile. Now choose the '''Guests''' member group. You will now see a page of information titled '''Permissions for group "Guests" in profile "Default"'''.  You see a bunch of check boxes.  If a box is unchecked, that member group does not have that permission in this profile.  If it is checked, the member does have permission in this profile.


If you do edit the Default profile, you are editing the main set of permissions that you can change on the General Permissions tab, some permissions that dont relate to a board will not show when editing the profile.
If you do edit the Default profile, you are editing the main set of permissions that you can change on the General Permissions tab, some permissions that do not relate to a board will not show when editing the profile.


====What if a member belongs to more than one group====
====What if a member belongs to more than one group====
If you have permissions set up in the "regular" way, then permissions always "add up".  If that permission is checked on one member group OR another to which a member belongs, that member will have that permission. Here is an example:
If a permission is checked on one membergroup '''or''' another to which a member belongs, that member will have that permission. Here is an example:
* Member SparklyPony belongs to "club members" and also "club officers".
* Member A belongs to membergroups A and B.
* "club members" is not allowed to '''Announce topic''' in the Default profile (disallowed)
* Membergroup A is not allowed to '''Announce topic''' in the Default profile (disallowed)
* "club officers" is '''allowed''' to '''Announce topic''' in the Default profile
* Membergroup B is allowed to '''Announce topic''' in the Default profile
* Therefore, member SparklyPony has the permission '''Announce topic''' in the Default profile
* Therefore, member A has the permission '''Announce topic''' in the Default profile


When you first install SMF 2.x, your forum will have "regular" permissions. If you need the ability to deny permissions to some members even if they belong to membergroups which are allowed those permissions, you can read about [[Disallow and Deny - What's the difference when it comes down to permissions|the difference between disallow and deny]].  '''Deny''' is a sometimes-tricky advanced topic.  
When you first install SMF 2.0.x, your forum will have regular permissions. If you need the ability to deny permissions to some members even if they belong to membergroups which are allowed those permissions, you can read about [[Disallow and Deny - What's the difference when it comes down to permissions|the difference between disallow and deny]].  '''Deny''' is a sometimes-tricky advanced topic.  


===Create a new profile===
===Create a new profile===
If you have had a good look at all the profiles you've already got, and don't see one you like for a particular board, you can create a new one.  From Administration Center » Permissions » Edit Profiles , scroll down to the '''New Profile''' section, fill in a name for your new profile, choose a profile that is close to what you want to '''Copy Permissions From''' as a starting point, and hit the '''Create''' button.  Then check and edit the permissions for each member group in this profile.  
Go to ''Administration Center » Permissions » Edit Profiles'' , and scroll down to the '''New Profile''' section. Fill in a name for your new profile, choose a profile that is close to what you want to '''Copy Permissions From''' as a starting point, and click the '''Create''' button.  Once created, you can check and edit the permissions for each membergroup in this profile.  


===Assigning permissions to a board===
===Assigning permissions to a board===
Administration Center » Boards » Modify Boards.  Pick the board you want to change and click on its "modify" link. On the '''Permission Profile:''' line, choose the board permission profile name you want from the drop-down list.
''Administration Center » Boards » Modify Boards''.  Pick the board you want to change and click on its "modify" link. On the '''Permission Profile:''' line, choose the board permission profile name you want from the drop-down list.


===But what if I want one member to have very special permissions on this board===
===But what if I want one member to have very special permissions on this board===
Line 45: Line 44:


==Advanced options can make it easier to assign permissions within a profile==
==Advanced options can make it easier to assign permissions within a profile==
You do not need to use these advanced options.  But if you have several permission profiles and want to make sweeping changes to several membergroups within those profiles, advanced options can speed things up.
You do not need to use these advanced options, but if you have several permission profiles and want to make sweeping changes to several membergroups within those profiles, advanced options can speed things up.


First, click the checkbox at the end of the line for one or several of the member groups for this profile.  Now scroll down to the '''Advanced Options''' section of the page.  If you see only a title, click on the little triangle to show the details.  You have three choices.
Click the checkbox at the end of the line for one or several of the membergroups for this profile.  Scroll down to the '''Advanced Options''' section of the page.  If you see only a title, click on the little triangle to show the details.  You have three choices:
# '''Apply pre-defined permission set''' -- click on the '''?''' for a quick description of each of the 4 choices here.
# '''Apply pre-defined permission set:''' click on the '''?''' for a quick description of each of the four choices here.
# '''Set permissions like this group:''' Select a membergroup from the list of member groups.  The permissions for each of the member groups you checked in the list above will be changed to match the member group you choose from this list.
# '''Set permissions like this group:''' Select a membergroup from the list of membergroups.  The permissions for each of the membergroups you checked in the list above will be changed to match the membergroup you choose from this list.
# ''''Add permission... Clear permission... Deny permission...'''  This is a quick change. From the first drop-down list on this line, choose whether to add, clear, (or deny, if you have deny permissions set for your forum).  From the second drop-down list, choose which permission to change.  The permissions for each of the member groups you have checked above will have this one change made.
# ''''Add permission... Clear permission... Deny permission...:'''  This is a quick change. From the first drop-down list on this line, choose whether to add, clear, or deny (if you have deny permissions set for your forum).  From the second drop-down list, choose which permission to change.  The permissions for each of the membergroups you have checked above will have this one change made.


Now, click the '''Set Permissions''' button to make it so.
Finally, click the '''Set Permissions''' button to make the changes.
 
[[Category:FAQ]]
[[Category:FAQ]][[Category:BFG]]

Revision as of 15:02, 3 August 2016

Permission profile is short for board permission profile. In SMF 2.0.x and later, you use a board permission profile to control precisely who can post, add attachments, or moderate on each and every board on your forum. If you use SMF 1.1.x, please read about local board permissions instead.

Permission profiles describe, for each membergroup, what that membergroup is allowed to do. Every board on your forum uses just one permission profile. If you do not pick a board permission profile for a board, SMF will use the default board permission profile for that board. Board permission profiles do not control who can see a board; for more on this, please read what members are allowed to see and do.

When you are setting up custom board permission profiles, you need to keep two things in mind:

  1. For each board, pick the permission profile you want to use for that board (or stick with the default profile).
  2. Make changes to a permission profile, or create a new one.

Before you change any board permissions, check which board permission profile you are working with, and which boards use that profile. Any time you change permissions on one board, you change permissions on any board that uses the same board permission profile.

Choose the permission profile for a board

To see which boards are using which profiles, go to Administration Center » Permissions » Board Permissions. This shows a list of all the boards on your forum, ordered by category, board, and child board. For each board, there is a profile name. Click on the Board Name to modify the board and choose a different board Permission Profile from the drop-down list.

Change a board permission profile or create a new one

See or edit permissions for a profile

Go to Administration Center » Permissions » Edit Profiles and click on a Permission Profile name. You will see the profile name and a list of member group names, some statistics, a link to "modify permissions", and a check-box. Below this list, there is a set of Advanced Options.

Caution: remember that whenever you modify membergroup permissions within a board permission profile, you will affect every board that uses this same profile.

See or change permissions for a member group in this board permission profile

Simply click on the member group name. Suppose you already chose the Default profile. Now choose the Guests member group. You will now see a page of information titled Permissions for group "Guests" in profile "Default". You see a bunch of check boxes. If a box is unchecked, that member group does not have that permission in this profile. If it is checked, the member does have permission in this profile.

If you do edit the Default profile, you are editing the main set of permissions that you can change on the General Permissions tab, some permissions that do not relate to a board will not show when editing the profile.

What if a member belongs to more than one group

If a permission is checked on one membergroup or another to which a member belongs, that member will have that permission. Here is an example:

  • Member A belongs to membergroups A and B.
  • Membergroup A is not allowed to Announce topic in the Default profile (disallowed)
  • Membergroup B is allowed to Announce topic in the Default profile
  • Therefore, member A has the permission Announce topic in the Default profile

When you first install SMF 2.0.x, your forum will have regular permissions. If you need the ability to deny permissions to some members even if they belong to membergroups which are allowed those permissions, you can read about the difference between disallow and deny. Deny is a sometimes-tricky advanced topic.

Create a new profile

Go to Administration Center » Permissions » Edit Profiles , and scroll down to the New Profile section. Fill in a name for your new profile, choose a profile that is close to what you want to Copy Permissions From as a starting point, and click the Create button. Once created, you can check and edit the permissions for each membergroup in this profile.

Assigning permissions to a board

Administration Center » Boards » Modify Boards. Pick the board you want to change and click on its "modify" link. On the Permission Profile: line, choose the board permission profile name you want from the drop-down list.

But what if I want one member to have very special permissions on this board

Create a special membergroup just for that user. Move that user into that membergroup. You might want to remove one or more other membergroups from that member. To change membergroups for a user, use that member's account settings. Go to Administration Center » Members » View All Members , choose a member name, and choose Account Settings from the member menu.

Every time you create a new membergroup, you need to go through all of your permission profiles to make certain that the new membergroup has the permissions you want in every single profile you want to use. If that sounds tedious, please read about the advanced option "Set permissions like this group" below.

Advanced options can make it easier to assign permissions within a profile

You do not need to use these advanced options, but if you have several permission profiles and want to make sweeping changes to several membergroups within those profiles, advanced options can speed things up.

Click the checkbox at the end of the line for one or several of the membergroups for this profile. Scroll down to the Advanced Options section of the page. If you see only a title, click on the little triangle to show the details. You have three choices:

  1. Apply pre-defined permission set: click on the ? for a quick description of each of the four choices here.
  2. Set permissions like this group: Select a membergroup from the list of membergroups. The permissions for each of the membergroups you checked in the list above will be changed to match the membergroup you choose from this list.
  3. 'Add permission... Clear permission... Deny permission...: This is a quick change. From the first drop-down list on this line, choose whether to add, clear, or deny (if you have deny permissions set for your forum). From the second drop-down list, choose which permission to change. The permissions for each of the membergroups you have checked above will have this one change made.

Finally, click the Set Permissions button to make the changes.



Advertisement: