Posted by nbz on March 25, 2009 at 6:54pm
Jump to:
| Project: | Forum Access |
| Version: | 6.x-1.0-beta3 |
| Component: | Code |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed (fixed) |
Issue Summary
Just separating this from #407766: Restrict 'administer forums' to 'View'able forums as it might be different.
I have a couple of roles:
Admin Role - has Administer Forums permission.
Core Cabal - has Administer Nodes permission
Restricted role - does NOT have the above administer permissions.
Restricted role has view and create permissions for a restricted forum. Core cabal has all boxes ticked and not untickable.
If a user has roles of core cabal and admin role, he cannot see the restricted forum - the user also needs the restricted role.
Is this normal and how it should be?
Comments
#1
I think that's a bug. There's no use in hiding the forum from users with administer nodes, because they can see all the nodes in the forum through other means anyway. That's why I'm disabling the checkboxes, but I forgot to make the forum itself viewable for roles with the administer nodes permission.
We could withhold (i.e. not give) the comment functions, but does that make sense? If you give someone administer nodes, would you want to keep them from viewing/posting/editing/deleting comments?
#2
yes, I think they should have the ability to view/post/edit/delete all comments too as for me, it would not make sense to restrict that.
#3
On further thought, we could actually withhold Post from users with the adminster nodes permission. I'm not sure whether anyone would want to do that, but technically it's possible, so I guess there's nothing wrong with offering it.
There's no way to keep a user with administer nodes from viewing/editing/deleting any node, so offering these checkboxes would lead to a wrong sense of control. And extending View/Edit/Delete to comments is the reasonable thing to do.
#4
Fixed in 6.x-1.x-dev.
#5
Automatically closed -- issue fixed for 2 weeks with no activity.