SMF Development > Feature Requests

"Administrate forum and database" permission split up

<< < (4/6) > >>

N. N.:

--- Quote from: emanuele on April 12, 2012, 03:36:15 PM ---
--- Quote from: N. N. on April 12, 2012, 02:46:30 PM ---However, something like the critical administration tasks, meaning these ones (basically), must remain together. With them, you made someone an admin anyway. (and it's not even relevant if they have other permissions, they could take them: they administrate.). That's an admin/co-admin: they are administrating forum/database.

It would be dangerous to split them in such way that people may think their "co-admin" has a permission like 'install packages/language files' and not 'server settings access'. Because it's basically false, and basically a false sense of security, on a critical bit: those 'co-admins' can access server settings. And just about everything else on the forum.

--- End quote ---
While writing my previous post I was even considering to go a step further and propose to completely remove those "admin-only" permissions and reserve them for the admin group only.
Maybe too much...

--- End quote ---

Yep. Crossed my mind. :D

devil9394:
I'd like to thank you all for your comments and ideas regarding this topic.


--- Quote from: Yoshi2889 on April 12, 2012, 03:51:31 PM ---While I must agree, I still think the current permission is too much in one package. It should definitely be split up in way more permissions. How and what you are going to split really doesn't matter much to me, but really, lots of stuff can be split from it.

--- End quote ---
This is exactly what I meant, there are too many things integrated in only one permission, some of them being useful things that could be given to who knows what rank, without giving the access of the most important and secret things of the forum.
And if this split up would make problems to some amateur SMF users, then it could be added on a separate page, than the trivial Permissions page, so the amateur users won't give a too important permission to who knows what rank, if you understand what I mean.

N. N.:
Other examples than 'administrate forum and database' would be useful, devil9394, if you can propose some and their usefulness.

devil9394:
Manage Censored Words List (Posts and Topics -> Censored Words): This function could be added to some low ranks, without having to give them all the other things from "Administrate forum and database".

I'd suggest some other things that could be split up, but these things are more for those that I could, and would like to, add to some lower ranks without giving access to server settings, therefore there is no need for me to suggest them, as they wouldn't fit in all the cases.

青山 素子:

--- Quote from: devil9394 on April 19, 2012, 11:01:10 AM ---Manage Censored Words List (Posts and Topics -> Censored Words): This function could be added to some low ranks, without having to give them all the other things from "Administrate forum and database".

--- End quote ---

It's a good idea, but the only problem is that the replacement for the censored word can be any kind of thing at all, even JavaScript and arbitrary HTML. The feature would have to be re-written to not allow anything beyond basic bbcode to make it safe for granting to non-admins. Personally, I think it has merit.

Navigation

[0] Message Index

[#] Next page

[*] Previous page