Permissions - blank

Owdy · March 14, 2004, 11:02:02 AM

In permissions area, there are Allow and Denie but also blank. After upgrade, most of things are blank. Is blank allowed or denied?

bostasp · March 14, 2004, 11:03:10 AM

I think blank is denied. I'm yet to go through and set them all properly, to get rid of a few errors.

Chris Cromer · March 14, 2004, 11:05:22 AM

Hmmm if they are not denied... and are not allowed... then they are not allowed... but then they are not denied... but they are not allowed... but they are not denied... so it goes into an infinite loop trying to decide which until your server dies.

Owdy · March 14, 2004, 11:06:11 AM

Ok, second-, in index.php?action=permissions . What is difference of Global and Local? If you cklick those you end up in same place. i dont get this.

bostasp · March 14, 2004, 11:07:01 AM

Global I think is for the whole forum and local is just for that board...

Chris Cromer · March 14, 2004, 11:07:51 AM

Global means it affects all boards, local means it affects just the board of your choice.

Grudge · March 14, 2004, 11:15:13 AM

Blank just means "take permission from global". So if you are setting a permission for a certain board and a permission is blank then that usergroup takes the permissions from the global board permissions. Allow/Deny basically say "Over ride the users global permissions with this one"

Owdy · March 14, 2004, 11:17:19 AM

That i do understand. But what is the functyion when i click those? What happend if i click global in some board? Both links take me to "Permissions by Board". I like that beta4 version more. This is confusing....

Chris Cromer · March 14, 2004, 11:18:56 AM

Read the url more carefully... one says local the other says global... they look the same but are not the same.

Owdy · March 14, 2004, 11:20:50 AM

Well, i just have to test this. Learn by hard way

[Unknown] · March 14, 2004, 04:54:43 PM

Here's an example.

Let's say I have one group - "Attachment Posters". The only thing they can do is post attachments. They have no other permissions.

If I set everything else to DENY, it would mean that people who could attach... couldn't post!! Obvsiouly this would be undesirable!

Blank means... leave it as it is. It means, let the OTHER groups this member is in decide.

If a permission is denied... it is denied. Period. Doesn't matter if other groups allow it - it's been denied.

-[Unknown]

Owdy · March 14, 2004, 04:58:44 PM

Well now i get that. Demmit, i changed all blanks to denied

DeadMetal · March 18, 2004, 11:13:49 AM

But what if a person is in two membergroups and (for example) posting attachments is allowed in one group but it's denied in the other group. Will that person be able to post attachments?

[Unknown] · March 18, 2004, 02:43:40 PM

No, it will be denied. Denied is final. If ANY permission is denied, they will NOT be able to do it. Even if another group lets them.

-[Unknown]

pseudoelmo · March 20, 2004, 03:00:38 AM

So overlapping permissions are logically ANDed together? assuming that deny is false and allow is true =)

pseudoelmo · March 20, 2004, 03:04:15 AM

Quote from: Owdy on March 14, 2004, 11:17:19 AM
That i do understand. But what is the functyion when i click those? What happend if i click global in some board? Both links take me to "Permissions by Board". I like that beta4 version more. This is confusing....

If you'll notice, clicking the Global or Local option next to a board in the Permissions area changes whcih option the black arrow/triangle points to. When it's set to Global, that board does not have specific permissions. When set to Local, it does.

For instance, if you had a group of people that should be able to to post attachments in one board but not in others, you can't enable attachment posting in that membergroup globally. You instead set the board to local and edit the local copy of that membergroup to allow posting attachments.

If you read carefully the red text when editing permissions on a local group, it makes more sense. It says something to the effect of, "Editing local permissions for group MyGroup on the specific board, MyBoard." That is, of course, paraphrased.. but you get the idea.

Make sense?

[Unknown] · March 20, 2004, 08:23:07 PM

Yes, they are basically anded, except there are three values. Blank means, I don't care... so it's like this:

01 0 <-- deny, allow, blank, deny.
0 1 <-- deny, blank, allow, blank.
1111 <-- allow, allow, allow, allow.
-----
0110 <-- deny, allow, allow, deny.

And also like this:

1 <-- allow, blank, blank, blank.
1 <-- blank, allow, blank, blank.
0 <-- blank, deny, blank, blank.
-----
1000 <-- allow, deny, deny, deny.

-[Unknown]

News:

Permissions - blank