SMF2.1:Permissions: Difference between revisions From Online Manual

Jump to: navigation, search
m (grammar fixes)
m (Enhancing language and removing some white space)
 
(21 intermediate revisions by one other user not shown)
Line 1: Line 1:
{{WIP}}
{{WIP}}
{{versions|versionsmore}}
{{versions|versionsmore}}


{{TOCright}}
{{TOCright}}


In the ''Admin Center > Members > Permissions'' sub-menu, there are 5 tabs: ''General Permissions, Board Permissions, Edit Profiles, Post Moderation'', and ''Settings''.
==Introduction==
 
Permissions are a very powerful tool for managing your forum. It is advisable to only change one permission at a time and to test it prior to changing another one. The reason is because the permissions can often interact with each other in unexpected ways, resulting in untested changes having unintended consequences. If you need help beyond the information provided on this page, please feel free to investigate other support options, which are found on this page: https://support.simplemachines.org/.
 
There are two separate sets of permissions. While these permission sets do not overlap, they certainly can interact, depending on how they are used. All permissions are given to members and/or guests and are managed using membergroups. Each set of permissions is allocated and utilized differently:
* The '''General Permissions''' are applied to membergroups. For example, these can allowe members who belong to certain groups the ability to do things which those in other groups cannot. Permissions can be applied to custom membergroups in the same way as the default membergroups.
* The '''Board Permissions''' are also applied to membergroups. These permissions are managed using profiles, one of which is assigned to each board.  For example, members or membergroups can have certain pemissions on one board, but not on another. There are four default profiles and it is possible to create custom profiles.
 
In the ''Admin Center > Members > Permissions'' sub-menu, there are five tabs: ''General Permissions, Board Permissions, Edit Profiles, Post Moderation'', and ''Settings''.


==General Permissions==
==General Permissions==
This page shows a table which lists of all membergroups, along with a few statistics. On the right of each membergroup is a checkbox and a ''Modify'' link. The checkbox allows the administrator to apply the advanced options to make quick and easy changes to the membergroup permission profiles. The ''Modify'' link allows the administrator to customize each permission for the usergroup.
As mentioned above, General Permissions apply to membergroups, whether they are the default membergroups or custom groups.
 
This page comprises a table which lists all membergroups, along with a few statistics. If you have not yet added any custom membergroups, you will see five membergroups: Guests, Regular Members, Administrators, Global Moderators, and Moderators. Use the question mark icon on the left to read a definition of each group.
 
On the right side of the table, beside each membergroup, is a checkbox and a ''Modify'' text link. The ''Modify'' link allows the administrator to change specific permissions individually. The checkbox allows the administrator to apply the advanced options, which is a way to edit the entire membergroup at once.


===Modify===
===Modify===
Use the ''Modify'' link to the right of each membergroup name to individually set one or more '''''custom permissions''''' for the members of this group. Please see [[#List of Permissions|List of Permissions]] below, for more information on each of the permissions; and the page, [[Moderator]] for more information on how the moderator membergroup works. They will help you understand how to set permissions.
Use the ''Modify'' text link to the right of each membergroup name to '''individually''' set one or more permissions for the members of this group. The top half of the page offers settings for the [[#General Permissions|General Permissions]] which are explained in detail below. Please see the page, [[Moderator]] for more information on how the Moderator membergroup works. These will help you understand and decide how to set permissions. (The bottom half of the page shows the Board Permissions, which are explained in more detail below. They are included here with General Permissions for convenience, however, they also appear on Board Permissions page.)


===Advanced Options===
===Advanced Options===
These options allow you to quickly make changes to membergroups, using '''''pre-defined permission profiles'''''. To use them, first select one or more membergroups above by checking the box on the same line with the membergroup name. Then choose to do one of the things listed in the '''With selection''' box. When you have completed your selections, use the '''Set permissions''' button to make the changes.
These options allow you to make changes to the '''whole membergroup at once''', using '''pre-defined permission sets'''. These are simply sets of permissions which provide generalized types of abilities.  To use them, first select one or more membergroups from the table above by checking the box on the same line with the membergroup name, then make your choices in the ''With selection'' box below the table.
 
*'''Apply pre-defined permission set''' - Choose one of the four options from the dropdown menu: Restrictive, Standard, Moderator, or Maintenance. The question mark button to the left of each option explains the generalized types of permissions which each option provides.
*'''Set permissions like this group''' - Choose which group has the permissions closest to what you want for this membergroup.
*'''(Select a permission)''' dropdown menu offers all the available permissions which you might want to customize. Make your choice or choices.
*'''Add permission''' dropdown menu offers ''add permission'' and ''clear permission''. If you have configured the Deny Permissions option on ''Members > Permissions > Settings'', you will also have the ''Deny permission'' option to choose from. You can thus decide whether you want your chosen membergroup to have each permission, not have it, or have it denied (see further information below about Deny Permissions.)


For each membergroup selected above:
When you have completed your selections, click the '''Set permissions''' button to finalize each membergroup's permissions.
* '''Apply pre-defined permission set:''' Select one of the profile types from the option list to reset permission profiles to one of these four choices. These allow you to use the "default" permission setups - standard means 'nothing special', restrictive means 'like a guest', moderator means 'what a moderator has', and lastly maintenance means 'permissions very close to those of an administrator'.
*'''Set permissions like this group:''' Select the name of one of the membergroups from the option list to reset permission profiles to match the membergroup you select here.
*'''Add/Clear/Deny permission''' Select Add permission, Clear Permission or Deny Permission from the option list, then select a permission from the (Select a permission) option list. '''Deny is only present if Enable the option to deny permissions is checked in the Settings tab'''.


==List of Permissions==
==List of General Permissions==


===General===
===General===
Line 29: Line 44:


===Calendar===
===Calendar===
*'''View the calendar''' - Determines whether this group can view the calendar of an SMF forum. It can be found in the navigation bar.
*'''View the calendar''' - Determines whether this group can view the calendar of an SMF forum. A link to the Calendar can be found in the main forum menu.
*'''Create events in the calendar''' - Determines whether this group can create new events in the calendar.
*'''Create events in the calendar''' - Determines whether this group can create new events in the calendar.
*'''Edit events in the calendar''' - Determines whether this group can edit events in the calendar.
*'''Edit events in the calendar''' - Determines whether this group can edit events in the calendar.
Line 38: Line 53:
*'''Administrate forum and database''' - Determines whether this group can change database connection properties, edit server settings, and perform other administrative functions.
*'''Administrate forum and database''' - Determines whether this group can change database connection properties, edit server settings, and perform other administrative functions.
*'''Manage boards and categories''' - Determines whether this group can create, modify, and/or delete boards and categories.
*'''Manage boards and categories''' - Determines whether this group can create, modify, and/or delete boards and categories.
*'''Manage attachments and avatars''' - Determines whether this group can manage and delete attachments on the forum.
*'''Manage attachments and avatars''' - Determines whether this group can manage and delete attachments and/or avatars on the forum.
*'''Manage smileys and message icons''' - Determines whether this group can change smiley sets, delete smileys, and change smiley options. This includes message icons.
*'''Manage smileys and message icons''' - Determines whether this group can can add, edit and/or remove smileys and smiley sets. Also applies to message icons, if they have been enabled.
*'''Edit news''' - Determines whether this group can edit the forum's news.
*'''Edit news''' - Determines whether this group can edit the forum's news, assuming it has been enabled for the forum.
*'''Access the moderation center''' - Determines whether this group can see the [[Moderation center]].
*'''Access the moderation center''' - Determines whether this group can see the [[Moderation center]]. Note that the ability so see the Moderation Center does not grant moderation privileges.


===Member Administration===
===Member Administration===
Line 48: Line 63:
*'''Manage permissions''' - Determines whether this group can manage member permissions.
*'''Manage permissions''' - Determines whether this group can manage member permissions.
*'''Manage ban list''' - Determines whether this group can ban other members and/or discontinue bans.
*'''Manage ban list''' - Determines whether this group can ban other members and/or discontinue bans.
*'''Send a forum email to members''' - Determines whether this group can send an e-mail in bulk to all members or individual membergroups; this keeps the users from having to reveal their own e-mail addresses.
*'''Send a forum email to members''' - Determines whether this group can send an e-mail in bulk to all members or individual membergroups. This keeps the users from having to reveal their own e-mail addresses.
*'''Issue warnings to members''' - Determines whether this group can [[Warning|send warnings]] to other members of the forum.
*'''Issue warnings to members''' - Determines whether this group can [[Warning|send warnings]] to other members of the forum.


Line 59: Line 74:
*'''View other members' profile summary and stats pages''' - Determines whether this group can view profile summaries and member stats.
*'''View other members' profile summary and stats pages''' - Determines whether this group can view profile summaries and member stats.
*'''Allow Forum Profile edits''' - Determines whether this group can edit their profiles and/or other members' profiles.
*'''Allow Forum Profile edits''' - Determines whether this group can edit their profiles and/or other members' profiles.
*'''Edit additional profile settings''' - Determines whether this group can edit other profile settings for avatars, theme preferences, notifications and Personal Messages; for themselves and/or others.
*'''Edit additional profile settings''' - Determines whether this group can edit other profile settings, such as avatars, theme preferences, notifications and Personal Messages; for themselves and/or others.
*''''Edit signatures''' - Determines whether this group can edit the signature field in their profile and/or other members' profiles.
*''''Edit signatures''' - Determines whether this group can edit the signature field in their profile and/or other members' profiles.
*'''Edit website''' - Determines whether this group can edit the website field in their profile and/or other members' profiles.
*'''Edit website''' - Determines whether this group can edit the website field in their profile and/or other members' profiles.
*'''Edit custom title''' - Determines whether this group can edit their custom title, in their profile and/or other members' profiles.
*'''Edit custom title''' - Determines whether this group can edit their custom title, in their profile and/or other members' profiles.
*'''Edit personal text''' - Determines whether this group can edit their custom text, in their profile and/or other members' profiles.
*'''Edit personal text''' - Determines whether this group can edit their custom text, in their profile and/or other members' profiles.
*'''Select an avatar from the server''' - Determines whether this group can select an avatar which is stored on the forum server.
*'''Select an avatar from the server''' - Determines whether this group can select an avatar which is stored on the forum's server.
*'''Upload an avatar to the server''' - Determines whether this group can upload an avatar to the forum's server.
*'''Upload an avatar to the server''' - Determines whether this group can upload an avatar to the forum's server.
*'''Choose a remotely stored avatar''' - Determines whether this group can choose an avatar from an external server. Because avatars might influence the page creation time negatively, it is possible to disallow certain membergroups to use avatars from external servers.
*'''Choose a remotely stored avatar''' - Determines whether this group can choose an avatar from an external server. Because avatars might influence the page creation time negatively, it is possible to disallow certain membergroups to use avatars from external servers.
Line 79: Line 94:
*'''Mention others via @name''' - Determines whether this group can mention other members by their @name.
*'''Mention others via @name''' - Determines whether this group can mention other members by their @name.


The board permissions are different from the other four categories of permissions. This is because any forum may have several boards, and membergroups may have different permissions on different boards. Each Board Permission Profile is a list of the entire set of Board Permissions for each membergroup. The board permissions can be accessed from this page, and for each board via the Permissions by Board tab (see below).
==Board Permissions==
 
As mentioned above, Board Permissions are also applied to membergroups. They are managed with profiles, one of which is applied to each board. With these profiles, an administrator could allow users to have permissions on one board that the same users might not have on another board.
 
These are the four profiles which are written into the program, but administrators can also create their own custom profiles.
 
*'''Default''' - Initially, this is a configuration which developers set up for general use, on all boards. It can be customized or even replaced with a different profile.
*'''No Polls''' - In boards with this profile, users can neither create nor participate in polls. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.
*'''Reply Only''' - In boards with this profile, users cannot start new topics, but they can only reply to them. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.
*'''Read Only''' - In these boards, users can only read, but not participate in, topics. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.
 
===Change a Board's Profile===
On the Board Permissions page, you can see a table which lists all the boards in your forum, along with the profile assigned to each board. To switch to a different profile on a particular board, click on the name of the board. On the next page, find the ''Permission Profile'' option and choose another profile from the dropdown menu. Then at the bottom of the page, click ''Modify'' button. When you get back to Board Permissions page, you will see the new profile listed for that board.
 
Before moving on to editing the board permission profiles, below is the list of all the individual Board Permissions. These will help you understand and decide how to configure new profiles.
 
==List of Board Permissions==


==Board Permissions==
===Topics===
===Topics===
'''The six topic approval permissions are only visible if the core feature Post Moderation has been enabled'''.
*'''Post new topics, without requiring approval''' - Determines whether users in this membergroup can post new topics without moderator or administrator approval.         
*'''Post new topics, without requiring approval''' - Determines whether users in this membergroup can post new topics without moderator or administrator approval.         
*'''Post new topics, but hide until approved''' - Determines whether users in this member group can post new topics which are visible to moderators with the necessary permissions or administrators, but not other users.       
*'''Post new topics, but hide until approved''' - Determines whether users in this membergroup can post new topics which are only visible to moderators with the necessary permissions or administrators, but not other users.
*'''Post replies to topics, but hide until approved''' - Determines whether users in this membergroup can post replies which are visible to moderators with the necessary permissions or administrators, but not other users.
*'''Post replies to topics, without requiring approval''' - Determines whether users in this membergroup can post replies to topics without moderator or administrator approval. This can be set for the users' own topic, any topic, or no topics.
*'''Post replies to topics, without requiring approval''' - Determines whether users in this membergroup can post replies without moderator or administrator approval.
*'''Post replies to topics, but hide until approved''' - Determines whether users in this membergroup can post replies to topics which are only visible to moderators with the necessary permissions or administrators, but not other users. This can be set for the users' own topic, any topic, or no topics.
*'''Post attachments, but hide until approved''' - Determines whether users in this membergroup can post attachments which are visible to moderators with the necessary permissions or administrators, but not other users.        
*'''Save drafts of new posts''' - Determines whether users in this membergroup can save drafts of their new posts, so they can post or finish them later.
*'''Post attachments, without requiring approval''' - Determines whether users in this membergroup can post attachments without moderator or administrator approval.
*'''Post new topics''' - Determines whether users in this membergroup can post new topics.
*'''Merge any topic''' - Determines whether users in this membergroup can merge topics.
*'''Merge any topic''' - Determines whether users in this membergroup can merge topics.
*'''Split any topic''' - Determines whether users in this membergroup can split topics.
*'''Split any topic''' - Determines whether users in this membergroup can split topics.
*'''Send topics to friends''' - Determines whether users in this membergroup can send topics to their friends via email.
*'''Make topics sticky''' - Determines whether users in this membergroup can make some topics [[sticky]] topics.
*'''Make topics sticky''' - Determines whether users in this membergroup can make some topics [[sticky]] topics.
*'''Move topic''' - Determines whether users in this membergroup can move their own topics, all topics, or no topics at all.
*'''Move topic''' - Determines whether users in this membergroup can move their own topics, any topics, or no topics, to another board.
*'''Lock topics''' - Determines whether users in this membergroup can [[locked topic|lock]] their own topics, all topics, or no topics at all.
*'''Lock topics''' - Determines whether users in this membergroup can lock their own topics, any topics, or no topics.
*'''Remove topics''' - Determines whether users in this membergroup can remove their own topics, all topics, or no topics at all.
*'''Remove topics''' - Determines whether users in this membergroup can remove topics.
*'''Post replies to topics''' - Determines whether users in this membergroup can [[Post]] replies to their own topics, all topics, or no topics at all.
*'''Modify replies to own topics''' - Determines whether users in this membergroup can modify replies to their own topics.
*'''Modify replies to own topics''' - Determines whether users in this membergroup can modify replies to their own topics.
*'''Delete replies to own topics''' - Determines whether users in this membergroup can delete replies to their own topics.
*'''Delete replies to own topics''' - Determines whether users in this membergroup can delete replies to their own topics.
*'''Announce topic''' - Determines whether users in this membergroup can announce (send topic by email or private message) their topics.
*'''Announce topic''' - Determines whether users in this membergroup can send a message by email, announcing the topic.
 
===Posts===
===Posts===
*'''Delete posts''' - Determines whether users in this membergroup can delete their own posts, all posts, or no posts at all.
*'''Delete posts''' - Determines whether users in this membergroup can delete their own posts, any posts, or no posts.
*'''Modify posts''' - Determines whether users in this membergroup can modify their own posts, all posts, or no posts at all.
*'''Modify posts''' - Determines whether users in this membergroup can modify their own posts, any posts, or no posts.
*'''Report posts to the moderators''' - Determines whether users in this membergroup will be able to report posts to the forum moderators that receive forum notifications.
*'''Report posts to the moderators''' - Determines whether users in this membergroup will be able to report inappropriate posts to the forum moderators.
 
===General===
===General===
*'''Moderate board''' - Determines whether users in this membergroup can moderate the boards they have access to. With this permission users can reply to locked topics, change poll expiration time and view poll results.
*'''Moderate board''' - Determines whether users in this membergroup can moderate the boards they have access to. With this permission users can reply to locked topics, change poll expiration time and view poll results.
*'''Approve items awaiting moderation''' - Determines whether users in this membergroup can approve topics, posts, or attachments which need to be approved.  '''Post moderation must be enabled in Core Features for this to be displayed'''
*'''Approve items awaiting moderation''' - Determines whether users in this membergroup can approve topics, posts, or attachments which need to be approved.  '''Post moderation must be enabled for this to be displayed.'''
 
===Polls===
===Polls===
*'''View polls''' - Determines whether users in this membergroup will be able to view polls.
*'''View polls''' - Determines whether users in this membergroup are able to view polls.
*'''Vote in polls''' - Determines whether users in this membergroup will be able to vote in polls they can see.
*'''Vote in polls''' - Determines whether users in this membergroup are able to vote in polls they can see.
*'''Post Polls''' - Determines whether users in this membergroup will be able to make their own polls.
*'''Post Polls''' - Determines whether users in this membergroup are able to create their own polls.
*'''Add [[poll]] to topics''' - Determines whether users in this membergroup are allowed to add polls to existing topics. The forum admins can choose whether they must have posted the topic, or if they can add it to any [[Topic]] they can see.
*'''Add [[poll]] to topics''' - Determines whether users in this membergroup are allowed to add polls to their own existing topics, any existing topics, or no topics. The user must also have permission to edit topics, to be able to add a poll.
*'''Edit polls''' - Determines whether users in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. In order to edit the maximum number of votes and the expiration time a user needs to have the 'Moderate board' permission.
*'''Edit polls''' - Determines whether users in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. A user must also have the 'Moderate board' permission for this.
*'''Lock polls''' - Determines whether users in this membergroup can lock their own polls, any polls, or no polls at all.
*'''Lock polls''' - Determines whether users in this membergroup can lock their own polls, any polls, or no polls at all.
*'''Remove polls''' - Determines whether users in this membergroup can remove their own polls, any polls, or no polls at all.
*'''Remove polls''' - Determines whether users in this membergroup can remove their own polls, any polls, or no polls at all.
===Notifications===
 
*'''Request notification on replies''' - Determines whether users in this membergroup will be able to request notification on replies to topics they select.
*'''Request notification on new topics''' - Determines whether users in this membergroup will be able to request notification when new topics get posted in a board.
===Attachments===
===Attachments===
*'''View Attachments''' - Determines whether users in this membergroup can view attachments.
*'''View Attachments''' - Determines whether users in this membergroup can view attachments.
*'''Post Attachments''' - Determines whether users in this [[membergroup]] can post attachments on topics.
*'''Post Attachments''' - Determines whether users in this [[membergroup]] can post attachments on topics.
*'''Post attachments, but hide until approved''' - Determines whether users in this membergroup can post attachments which are visible only to moderators with the necessary permissions or administrators, but not other users.         
*'''Post attachments, without requiring approval''' - Determines whether users in this membergroup can post attachments without moderator or administrator approval.


==Board Permissions==
==Edit Profiles==
This page provides ways to create new Board Permission Profiles and edit, delete, or rename existing profiles. All the existing profiles are listed along with the number of boards using each profile.


On this page, every board is listed with its corresponding permission profile.
Only the Default profile, and any custom profiles you might create, can be edited. If you want to edit one, click on it. You will see a table which lists all the membergroups, and gives the number of members in each group and the number of permissions for each group. To the right is a ''Modify'' text link for each membergroup. By clicking on that, you can customize the permissions '''individually''' for each membergroups in that profile. Alternatively, you can use the checkbox on the right, with the Advanced Options below, to edit the permissions '''all at once''' for each membergroup.


*Selecting the board name will bring you to the board's [[SMF2.1:Boards#Modify_Boards|Modify Boards]] page in ''Admin > Forum > Boards''.
===Duplicate, or New Profiles===
*Selecting the name of the [[Permission profiles|permission profile]] on the same line will bring you to the [[#Edit Profiles|Edit Profiles]] page for this profile.
The other profiles (No Polls, Read Only, Reply Only) cannot be edited or customized directly. But you can create duplicate profiles, and edit those. From the Edit Profiles page, look below the table which lists all the profiles. There you can create a new profile which is based on whichever existing profile you choose.
*Selecting ''[Edit All]'' will allow you to choose a new permission profile from drop-down lists for one or several different boards at once -- click on the "Save" button when you are done.


A more detailed section on this can be found at [[Board Permissions]].
#'''Profile Name''' - Enter a name for your new or duplicate profile.
#'''Copy Permissions From''' - Choose which existing profile you want to base your new profile on.
#'''Click Create button'''


==Edit Profiles==
Now you will see your new profile name in the list above. Click on it and you will see the table with all the membergroups listed. Click on ''Modify'' to edit permissions '''individually''' for each membergroup in your custom profile. Or you can use the checkbox on the right, together with the Advanced Options below, to edit the permissions '''all at once''' for each membergroup in your new profile.


This page provides ways to create new permission profiles and edit, delete, or rename existing profiles.
===Rename Profiles===
You can rename permission profiles that you have created, but the four default permission profiles (''Default, No Polls, Reply Only, and Read Only'') cannot be renamed.


===Edit Profiles===
Place a check in the box to the right of the profile you want to rename. Then click the '''Rename All''' button at the bottom of the list. That will create a field where you can edit the name. When finished, click '''Save Changes''' button at the bottom right of the list.


All the existing permission profiles are listed along with the number of boards using each profile. To modify any existing profile, click on its name. You will then be taken to a page that lists the membergroups and the permissions they have been assigned in relation to this particular permission profile. To change the permissions of a membergroup within this permission profile, click on "Modify" next to the name of the membergroup.
===Remove Profiles===
You can delete any permission profile that you have created. The four default permission profiles (''Default, No Polls, Reply Only, and Read Only'') cannot be removed. Select the checkbox on the same line as the profile you wish to remove, and then click the '''Remove Selected''' button. Note that you can only delete a permission profile if it is not currently assigned to a board.


===New Profile===
==Post Moderation==
 
If you would like admins and/or moderators to view messages or attachments, and approve or disapprove them before other members can see them, then place a checkmark in the '''Enable Post Moderation''' box. If you install a gallery mod at some point, this may also extend to images uploaded to the gallery (read the gallery mod's faqs to verify). In a way, this allows administrators to set even more detailed board permissions regarding posting messages and attachments for each membergroup.
*'''Profile Name''' - In this box you can define the name of the new permission profile.
*'''Copy Permissions From''' - By selecting one of the existing profiles from this dropdown box, the permissions from this profile will be used for the newly created one.
 
===Rename===
 
You can rename permission profiles that you have created, but the four default permission profiles (''Default, No Polls, Reply Only, and Read Only'') cannot be renamed. When the ''Rename'' button is clicked, all the profiles you have created can be renamed, as long as they are not currently assigned to a board. After renaming a profile, make sure that you click on the ''Save Changes'' button.


===Remove Selected===
Enabling post moderation will cause a form with detailed options to show up below. Only the Default and any new, custom profiles you have created, can be customized here. First, select which profile you want to customize with post moderation. To the far right of the Legend, in the top, right corner of the form, choose the profile from the dropdown menu at ''Select Profile'' and click the ''Go'' button.


You can delete any permission profile that you have created. The four default permission profiles (''Default, No Polls, Reply Only, and Read Only'') cannot be removed. Select the checkbox on the same line as the profile you wish to remove, and then click the ''Remove Selected'' button. Note that you can only delete a permission profile if it is not currently assigned to a board.
For each membergroup, there are four User Actions for which post moderation permissions can be set: posting '''New Topics''', the member's '''Own Replies''', '''Any Replies''', and posting '''Attachments'''. These are interactive with the relevant board permissions. There are three possible moderation options for each:


==Post Moderation==
'''Post moderation must be enabled in Core Features for this page to be visible'''.


In this section admins can define the actions that require [[Core Features#Post Moderation|Post Moderation]] for each permission profile. This is a shortcut way of changing some of the permissions in the board permission profiles.
*[[File:Blue-document--plus.png]] - Can Create: members can perform this action without moderation
*[[File:Blue-document--exclamation.png‎]] - Can Create but Requires Approval: members can perform the action, but approval is required before the item becomes visible to all other members
*[[File:Blue-document--minus.png‎]] - Cannot Create: members cannot perform this action


The administrator must first select a profile from the option list and select the '''go''' button.
For each listed profile, there are four user actions for which post moderation permissions can be set. Each one corresponds to board permissions in the corresponding profile. For each of these user actions, three post moderation options are available.
*[[File:Post_moderation_allow.gif‎]] - Can Create. The members can perform the action without moderation.
*[[File:Post_moderation_moderate.gif‎]] - Can Create but Requires Approval. The members can perform the action, but approval is required before becoming visible to all other members.
*[[File:Post_moderation_deny.gif‎]] - Cannot Create. The member cannot perform the action.


{| style="width: 100%" cellpadding="5"
{| style="width: 100%" cellpadding="5"
! scope="col" style="width:13%;text-align:left" | User Action
! scope="col" style="width:13%;text-align:left" | User Action
! scope="col"style="width:35%" | [[File:Post_moderation_allow.gif‎]]
! scope="col"style="width:35%" | [[File:Blue-document--plus.png]]
! scope="col" style="width:35%" | [[File:Post_moderation_moderate.gif‎]]
! scope="col" style="width:35%" | [[File:Blue-document--exclamation.png‎]]
! scope="col" style="width:17%" | [[File:Post_moderation_deny.gif‎]]
! scope="col" style="width:17%" | [[File:Blue-document--minus.png‎‎]]
|-
|-
! scope="row" style="text-align:left" | New Topics
! scope="row" style="text-align:left" | New Topics
|Post new topics, without requiring approval
|Post new topics, without requiring approval
|Post new topics, but hide until approved
|Post new topics, but hide until approved
|(neither allowed)
|Neither allowed
|-
|-
! scope="row" style="text-align:left" | Own Replies
! scope="row" style="text-align:left" | Own Replies
|Post replies to topics, without requiring approval, own topic
|Post replies to own topics, without requiring approval
|Post replies to topics, but hide until approved, own topic
|Post replies to own topics, but hide until approved
|(neither allowed)
|Neither allowed
|-
|-
! scope="row" style="text-align:left" | Any Replies
! scope="row" style="text-align:left" | Any Replies
|Post replies to topics, without requiring approval, any topic
|Post replies to any topics, without requiring approval
|Post replies to topics, but hide until approved, any topic
|Post replies to any topics, but hide until approved
|(neither allowed)
|Neither allowed
|-
|-
! scope="row" style="text-align:left" | Attachments
! scope="row" style="text-align:left" | Attachments
|Post attachments, without requiring approval
|Post attachments, without requiring approval
|Post attachments, but hide until approved
|Post attachments, but hide until approved
|(neither allowed)
|Neither allowed
|}
|}


Line 196: Line 217:


==Settings==
==Settings==
*'''Membergroups allowed to manage permissions''' - Administrators can select which membergroups are allowed to manage permissions.
*'''Membergroups allowed to manage permissions''' - Administrators can select which membergroups are allowed to manage permissions.
*'''Enable the option to deny permissions''' - Once enabled along with granting permissions it will be possible also to deny any permission. Denied permissions are not allowed even if the member belong to another membergroup for which the permission is granted.
*'''Enable the option to deny permissions''' - Once enabled, along with granting permissions, it will be possible also to deny any permission. Denied permissions are not allowed even if the member belongs to another membergroup for which the permission is granted.
*'''Enable permissions for post count based groups''' - Determines whether or not membergroups based on post count can be used to manage permissions.
*'''Enable permissions for post count based groups''' - This determines whether or not membergroups based on post count can be used to manage permissions. After you enable this option, all the post count based groups will appear below the original five membergroups - for both General and Board Permissions. Then you can edit their permissions, just like with the original membergroups.


==About Permissions==
==About Permissions==
===Options===
===Options===
SMF's permissions are so powerful because they can be set for each individual permission to three options rather than just on or off.
SMF's permissions are so powerful because it's possible to have three options set for each individual permission, rather than just on or off.
*'''A''' - This option gives user current permission
*'''A''' - This option gives user current permission
*'''X''' - This option does not give the user current permission
*'''X''' - This option does not give the user current permission
*'''D''' - This option denies the user current permission
*'''D''' - This option denies the user current permission
Things get really interesting when a user belongs to 2 or more membergroups with different options (A, X or D) for the same permission.  
Note that Deny is not available by default. The administrator needs to enable it in ''Members > Permissions > Settings''.
 
Things get really interesting when a user belongs to 2 or more membergroups with different options (A, X or D) for the same permission.
 
===Member belongs to 2 membergroups===
===Member belongs to 2 membergroups===
In this example a member belongs to '''only''' 2 different membergroups with different options for some permissions:
In this example a member belongs to '''only''' 2 different membergroups with different options for some permissions:
Line 239: Line 265:
*If you want a permission to be disallowed, then you must have all options X, or
*If you want a permission to be disallowed, then you must have all options X, or
*If you want a permission to be disallowed, you must have option D in at least one group. It does not matter if other options are A or X.
*If you want a permission to be disallowed, you must have option D in at least one group. It does not matter if other options are A or X.
You should not use D too much. Its a good idea to use special private membergroups  just to Deny some permissions. If you don't want some members to use e.g. private messages, you can set up a private membergroup with a descriptive name like "no-pm" and for that membergroup, set the permissions for pm to D. Every member of that group is not allowed pm's regardless of the other groups they belong. If you change your mind about that setting you can find easily which membergroup restricts PMs and reset it.
You should not use D too much. Its a good idea to use special private membergroups  just to deny some permissions. If you do not want some members to use private messages, for example, you can set up a private membergroup with a descriptive name like "no-pm" and for that membergroup, set the permissions for pm to D. Every member of that group is not allowed personal messages regardless of the other groups they belong. If you change your mind about that setting you can find easily which membergroup restricts personal messages and reset it.


{{ {{Localized|As an administrator 2.1}}}}
{{ {{Localized|As an administrator 2.1}}}}
[[Category:Permissions]]
[[Category:Permissions]]

Latest revision as of 00:04, 22 August 2023

Under construction-48.png Work in progress, expect frequent changes. Under construction-48.png

Please see SMF1.1:Permissions, SMF2.0:Permissions or SMF2.1:Permissions depending on the version of SMF you are using.

Introduction

Permissions are a very powerful tool for managing your forum. It is advisable to only change one permission at a time and to test it prior to changing another one. The reason is because the permissions can often interact with each other in unexpected ways, resulting in untested changes having unintended consequences. If you need help beyond the information provided on this page, please feel free to investigate other support options, which are found on this page: https://support.simplemachines.org/.

There are two separate sets of permissions. While these permission sets do not overlap, they certainly can interact, depending on how they are used. All permissions are given to members and/or guests and are managed using membergroups. Each set of permissions is allocated and utilized differently:

  • The General Permissions are applied to membergroups. For example, these can allowe members who belong to certain groups the ability to do things which those in other groups cannot. Permissions can be applied to custom membergroups in the same way as the default membergroups.
  • The Board Permissions are also applied to membergroups. These permissions are managed using profiles, one of which is assigned to each board. For example, members or membergroups can have certain pemissions on one board, but not on another. There are four default profiles and it is possible to create custom profiles.

In the Admin Center > Members > Permissions sub-menu, there are five tabs: General Permissions, Board Permissions, Edit Profiles, Post Moderation, and Settings.

General Permissions

As mentioned above, General Permissions apply to membergroups, whether they are the default membergroups or custom groups.

This page comprises a table which lists all membergroups, along with a few statistics. If you have not yet added any custom membergroups, you will see five membergroups: Guests, Regular Members, Administrators, Global Moderators, and Moderators. Use the question mark icon on the left to read a definition of each group.

On the right side of the table, beside each membergroup, is a checkbox and a Modify text link. The Modify link allows the administrator to change specific permissions individually. The checkbox allows the administrator to apply the advanced options, which is a way to edit the entire membergroup at once.

Modify

Use the Modify text link to the right of each membergroup name to individually set one or more permissions for the members of this group. The top half of the page offers settings for the General Permissions which are explained in detail below. Please see the page, Moderator for more information on how the Moderator membergroup works. These will help you understand and decide how to set permissions. (The bottom half of the page shows the Board Permissions, which are explained in more detail below. They are included here with General Permissions for convenience, however, they also appear on Board Permissions page.)

Advanced Options

These options allow you to make changes to the whole membergroup at once, using pre-defined permission sets. These are simply sets of permissions which provide generalized types of abilities. To use them, first select one or more membergroups from the table above by checking the box on the same line with the membergroup name, then make your choices in the With selection box below the table.

  • Apply pre-defined permission set - Choose one of the four options from the dropdown menu: Restrictive, Standard, Moderator, or Maintenance. The question mark button to the left of each option explains the generalized types of permissions which each option provides.
  • Set permissions like this group - Choose which group has the permissions closest to what you want for this membergroup.
  • (Select a permission) dropdown menu offers all the available permissions which you might want to customize. Make your choice or choices.
  • Add permission dropdown menu offers add permission and clear permission. If you have configured the Deny Permissions option on Members > Permissions > Settings, you will also have the Deny permission option to choose from. You can thus decide whether you want your chosen membergroup to have each permission, not have it, or have it denied (see further information below about Deny Permissions.)

When you have completed your selections, click the Set permissions button to finalize each membergroup's permissions.

List of General Permissions

General

  • View forum statistics - Determines whether this group can view the collected statistics of an SMF forum that can be found using the More Stats button, in the Info Center
  • View the memberlist - Determines whether this group can view the list of all registered members of an SMF forum.
  • View Who's Online - Determines whether this group can view Who's Online section in the Info Center, assuming the option to display the section has been enabled.
  • Search for posts and topics - Determines whether this group can use the Search feature, assuming the feature has been enabled. (If it has not been enabled, no Search button will be seen.)

Calendar

  • View the calendar - Determines whether this group can view the calendar of an SMF forum. A link to the Calendar can be found in the main forum menu.
  • Create events in the calendar - Determines whether this group can create new events in the calendar.
  • Edit events in the calendar - Determines whether this group can edit events in the calendar.

Note that the Calendar permissions will not appear if you have not enabled the Calendar feature for your forum.

Forum Administration

  • Administrate forum and database - Determines whether this group can change database connection properties, edit server settings, and perform other administrative functions.
  • Manage boards and categories - Determines whether this group can create, modify, and/or delete boards and categories.
  • Manage attachments and avatars - Determines whether this group can manage and delete attachments and/or avatars on the forum.
  • Manage smileys and message icons - Determines whether this group can can add, edit and/or remove smileys and smiley sets. Also applies to message icons, if they have been enabled.
  • Edit news - Determines whether this group can edit the forum's news, assuming it has been enabled for the forum.
  • Access the moderation center - Determines whether this group can see the Moderation center. Note that the ability so see the Moderation Center does not grant moderation privileges.

Member Administration

  • Moderate forum members - Determines whether this group can perform moderation tasks, such as register users manually, track IP addresses, online status, etc.
  • Manage and assign membergroups - Determines whether this group can create, manage, or delete membergroups.
  • Manage permissions - Determines whether this group can manage member permissions.
  • Manage ban list - Determines whether this group can ban other members and/or discontinue bans.
  • Send a forum email to members - Determines whether this group can send an e-mail in bulk to all members or individual membergroups. This keeps the users from having to reveal their own e-mail addresses.
  • Issue warnings to members - Determines whether this group can send warnings to other members of the forum.

Personal Messaging

  • Read personal messages - Determines whether this group can view personal messages.
  • Send personal messages - Determines whether this group can send personal messages to other members.
  • Save drafts of personal messages - Determines whether this group can save drafts of personal messages, so they can finish or send them later.

Member Profiles

  • View other members' profile summary and stats pages - Determines whether this group can view profile summaries and member stats.
  • Allow Forum Profile edits - Determines whether this group can edit their profiles and/or other members' profiles.
  • Edit additional profile settings - Determines whether this group can edit other profile settings, such as avatars, theme preferences, notifications and Personal Messages; for themselves and/or others.
  • 'Edit signatures - Determines whether this group can edit the signature field in their profile and/or other members' profiles.
  • Edit website - Determines whether this group can edit the website field in their profile and/or other members' profiles.
  • Edit custom title - Determines whether this group can edit their custom title, in their profile and/or other members' profiles.
  • Edit personal text - Determines whether this group can edit their custom text, in their profile and/or other members' profiles.
  • Select an avatar from the server - Determines whether this group can select an avatar which is stored on the forum's server.
  • Upload an avatar to the server - Determines whether this group can upload an avatar to the forum's server.
  • Choose a remotely stored avatar - Determines whether this group can choose an avatar from an external server. Because avatars might influence the page creation time negatively, it is possible to disallow certain membergroups to use avatars from external servers.
  • Report users' profiles - Determines whether this group can report other members' profiles. Allowing this helps prevent spam in the forum.

Member Accounts

  • Edit account settings - Determines whether this group can edit their own account's settings as well as the account settings of all members.
  • Edit displayed name - Determines whether this group can edit the displayed name field in their profile and/or other members' profiles.
  • Change password - Determines whether this group can change their password or secret question in their own profile, and/or in other members' profiles.
  • Delete account - Determines whether this group can delete their account or other members' accounts.
  • View warning status - Determines whether this group can view their own warning status and/or other members' warning status.

Mentions

  • Mention others via @name - Determines whether this group can mention other members by their @name.

Board Permissions

As mentioned above, Board Permissions are also applied to membergroups. They are managed with profiles, one of which is applied to each board. With these profiles, an administrator could allow users to have permissions on one board that the same users might not have on another board.

These are the four profiles which are written into the program, but administrators can also create their own custom profiles.

  • Default - Initially, this is a configuration which developers set up for general use, on all boards. It can be customized or even replaced with a different profile.
  • No Polls - In boards with this profile, users can neither create nor participate in polls. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.
  • Reply Only - In boards with this profile, users cannot start new topics, but they can only reply to them. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.
  • Read Only - In these boards, users can only read, but not participate in, topics. This profile cannot be directly edited or customized, however, you can create a new profile based on this one, and customize it.

Change a Board's Profile

On the Board Permissions page, you can see a table which lists all the boards in your forum, along with the profile assigned to each board. To switch to a different profile on a particular board, click on the name of the board. On the next page, find the Permission Profile option and choose another profile from the dropdown menu. Then at the bottom of the page, click Modify button. When you get back to Board Permissions page, you will see the new profile listed for that board.

Before moving on to editing the board permission profiles, below is the list of all the individual Board Permissions. These will help you understand and decide how to configure new profiles.

List of Board Permissions

Topics

  • Post new topics, without requiring approval - Determines whether users in this membergroup can post new topics without moderator or administrator approval.
  • Post new topics, but hide until approved - Determines whether users in this membergroup can post new topics which are only visible to moderators with the necessary permissions or administrators, but not other users.
  • Post replies to topics, without requiring approval - Determines whether users in this membergroup can post replies to topics without moderator or administrator approval. This can be set for the users' own topic, any topic, or no topics.
  • Post replies to topics, but hide until approved - Determines whether users in this membergroup can post replies to topics which are only visible to moderators with the necessary permissions or administrators, but not other users. This can be set for the users' own topic, any topic, or no topics.
  • Save drafts of new posts - Determines whether users in this membergroup can save drafts of their new posts, so they can post or finish them later.
  • Merge any topic - Determines whether users in this membergroup can merge topics.
  • Split any topic - Determines whether users in this membergroup can split topics.
  • Make topics sticky - Determines whether users in this membergroup can make some topics sticky topics.
  • Move topic - Determines whether users in this membergroup can move their own topics, any topics, or no topics, to another board.
  • Lock topics - Determines whether users in this membergroup can lock their own topics, any topics, or no topics.
  • Remove topics - Determines whether users in this membergroup can remove topics.
  • Modify replies to own topics - Determines whether users in this membergroup can modify replies to their own topics.
  • Delete replies to own topics - Determines whether users in this membergroup can delete replies to their own topics.
  • Announce topic - Determines whether users in this membergroup can send a message by email, announcing the topic.

Posts

  • Delete posts - Determines whether users in this membergroup can delete their own posts, any posts, or no posts.
  • Modify posts - Determines whether users in this membergroup can modify their own posts, any posts, or no posts.
  • Report posts to the moderators - Determines whether users in this membergroup will be able to report inappropriate posts to the forum moderators.

General

  • Moderate board - Determines whether users in this membergroup can moderate the boards they have access to. With this permission users can reply to locked topics, change poll expiration time and view poll results.
  • Approve items awaiting moderation - Determines whether users in this membergroup can approve topics, posts, or attachments which need to be approved. Post moderation must be enabled for this to be displayed.

Polls

  • View polls - Determines whether users in this membergroup are able to view polls.
  • Vote in polls - Determines whether users in this membergroup are able to vote in polls they can see.
  • Post Polls - Determines whether users in this membergroup are able to create their own polls.
  • Add poll to topics - Determines whether users in this membergroup are allowed to add polls to their own existing topics, any existing topics, or no topics. The user must also have permission to edit topics, to be able to add a poll.
  • Edit polls - Determines whether users in this membergroup can edit their polls, any polls, or no polls at all. This permission allows a user to edit the polls options, reset the poll, edit the maximum number of votes, and edit the expiration time of the poll. A user must also have the 'Moderate board' permission for this.
  • Lock polls - Determines whether users in this membergroup can lock their own polls, any polls, or no polls at all.
  • Remove polls - Determines whether users in this membergroup can remove their own polls, any polls, or no polls at all.

Attachments

  • View Attachments - Determines whether users in this membergroup can view attachments.
  • Post Attachments - Determines whether users in this membergroup can post attachments on topics.
  • Post attachments, but hide until approved - Determines whether users in this membergroup can post attachments which are visible only to moderators with the necessary permissions or administrators, but not other users.
  • Post attachments, without requiring approval - Determines whether users in this membergroup can post attachments without moderator or administrator approval.

Edit Profiles

This page provides ways to create new Board Permission Profiles and edit, delete, or rename existing profiles. All the existing profiles are listed along with the number of boards using each profile.

Only the Default profile, and any custom profiles you might create, can be edited. If you want to edit one, click on it. You will see a table which lists all the membergroups, and gives the number of members in each group and the number of permissions for each group. To the right is a Modify text link for each membergroup. By clicking on that, you can customize the permissions individually for each membergroups in that profile. Alternatively, you can use the checkbox on the right, with the Advanced Options below, to edit the permissions all at once for each membergroup.

Duplicate, or New Profiles

The other profiles (No Polls, Read Only, Reply Only) cannot be edited or customized directly. But you can create duplicate profiles, and edit those. From the Edit Profiles page, look below the table which lists all the profiles. There you can create a new profile which is based on whichever existing profile you choose.

  1. Profile Name - Enter a name for your new or duplicate profile.
  2. Copy Permissions From - Choose which existing profile you want to base your new profile on.
  3. Click Create button

Now you will see your new profile name in the list above. Click on it and you will see the table with all the membergroups listed. Click on Modify to edit permissions individually for each membergroup in your custom profile. Or you can use the checkbox on the right, together with the Advanced Options below, to edit the permissions all at once for each membergroup in your new profile.

Rename Profiles

You can rename permission profiles that you have created, but the four default permission profiles (Default, No Polls, Reply Only, and Read Only) cannot be renamed.

Place a check in the box to the right of the profile you want to rename. Then click the Rename All button at the bottom of the list. That will create a field where you can edit the name. When finished, click Save Changes button at the bottom right of the list.

Remove Profiles

You can delete any permission profile that you have created. The four default permission profiles (Default, No Polls, Reply Only, and Read Only) cannot be removed. Select the checkbox on the same line as the profile you wish to remove, and then click the Remove Selected button. Note that you can only delete a permission profile if it is not currently assigned to a board.

Post Moderation

If you would like admins and/or moderators to view messages or attachments, and approve or disapprove them before other members can see them, then place a checkmark in the Enable Post Moderation box. If you install a gallery mod at some point, this may also extend to images uploaded to the gallery (read the gallery mod's faqs to verify). In a way, this allows administrators to set even more detailed board permissions regarding posting messages and attachments for each membergroup.

Enabling post moderation will cause a form with detailed options to show up below. Only the Default and any new, custom profiles you have created, can be customized here. First, select which profile you want to customize with post moderation. To the far right of the Legend, in the top, right corner of the form, choose the profile from the dropdown menu at Select Profile and click the Go button.

For each membergroup, there are four User Actions for which post moderation permissions can be set: posting New Topics, the member's Own Replies, Any Replies, and posting Attachments. These are interactive with the relevant board permissions. There are three possible moderation options for each:


  • Blue-document--plus.png - Can Create: members can perform this action without moderation
  • Blue-document--exclamation.png - Can Create but Requires Approval: members can perform the action, but approval is required before the item becomes visible to all other members
  • Blue-document--minus.png - Cannot Create: members cannot perform this action


User Action Blue-document--plus.png Blue-document--exclamation.png Blue-document--minus.png
New Topics Post new topics, without requiring approval Post new topics, but hide until approved Neither allowed
Own Replies Post replies to own topics, without requiring approval Post replies to own topics, but hide until approved Neither allowed
Any Replies Post replies to any topics, without requiring approval Post replies to any topics, but hide until approved Neither allowed
Attachments Post attachments, without requiring approval Post attachments, but hide until approved Neither allowed

Post moderation cannot be used to set deny permissions even if deny is enabled. The 'cannot create' option in post moderation is only ever disallow.

Settings

  • Membergroups allowed to manage permissions - Administrators can select which membergroups are allowed to manage permissions.
  • Enable the option to deny permissions - Once enabled, along with granting permissions, it will be possible also to deny any permission. Denied permissions are not allowed even if the member belongs to another membergroup for which the permission is granted.
  • Enable permissions for post count based groups - This determines whether or not membergroups based on post count can be used to manage permissions. After you enable this option, all the post count based groups will appear below the original five membergroups - for both General and Board Permissions. Then you can edit their permissions, just like with the original membergroups.

About Permissions

Options

SMF's permissions are so powerful because it's possible to have three options set for each individual permission, rather than just on or off.

  • A - This option gives user current permission
  • X - This option does not give the user current permission
  • D - This option denies the user current permission

Note that Deny is not available by default. The administrator needs to enable it in Members > Permissions > Settings.

Things get really interesting when a user belongs to 2 or more membergroups with different options (A, X or D) for the same permission.

Member belongs to 2 membergroups

In this example a member belongs to only 2 different membergroups with different options for some permissions:

permissions option from group A option from group B Result for permission explanation
permission 1 A A allowed obviously
permission 2 A X allowed A beats X
permission 3 A D not allowed D beats A
permission 4 X X not allowed obvious too
permission 2 X D not allowed D beats X
permission 3 D D not allowed is this obvious or what?

In short: D beats A which beats X

Member belongs to 3 or more membergroups

  • If you want a permission to be allowed, then you must have option A in at least one group and no D.
  • If you want a permission to be disallowed, then you must have all options X, or
  • If you want a permission to be disallowed, you must have option D in at least one group. It does not matter if other options are A or X.

You should not use D too much. Its a good idea to use special private membergroups just to deny some permissions. If you do not want some members to use private messages, for example, you can set up a private membergroup with a descriptive name like "no-pm" and for that membergroup, set the permissions for pm to D. Every member of that group is not allowed personal messages regardless of the other groups they belong. If you change your mind about that setting you can find easily which membergroup restricts personal messages and reset it.

Main

Configuration

Forum

Members

Maintenance

Miscellaneous



Advertisement: