• Welcome to Simple Machines Community Forum. Please login or sign up.
December 06, 2021, 07:42:16 AM

News:

SMF 2.0.18 has been released! Please update. Read more.


[2.0] Global Mod can modify and remove Admin Posts

Started by feline, July 25, 2011, 03:13:09 PM

Previous topic - Next topic

nimda



Elmacik

I support the idea that it works as intended. But what about this different approach: we always say that "you shouldn't give these permissions to people you don't trust"; OK, so do we ever expect a trusted moderator remove an admin? That's a little bit paradox. :) Because if the global mod is never expected to delete an admin, then why he can?
Home of Elmacik

Kindred

Elmacik, it's not about removing an admin account.... it's about removing or editing admin POSTS

and setting a flag on a post to say "this is an admin post, only other admins can remove it" seems like a waste of processing.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.<br /><br />"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Arantor

In any case, even users who have the ability to manage membergroups can't remove an admin account without being an admin themselves.

I can see both sides of the argument, but I think I'm inclined to agree that global moderators should just be able to globally moderate - posts.
No good deed goes unpunished
All helpful urges should be circumvented

Elmacik

Quote from: Kindred on June 27, 2012, 01:49:13 PM
Elmacik, it's not about removing an admin account.... it's about removing or editing admin POSTS

and setting a flag on a post to say "this is an admin post, only other admins can remove it" seems like a waste of processing.

Yeah I know, some people also mentioned global mods removing admins. Either way, I agree that modfying posts permission should not exclude admin posts. And as Arantor stated, new behaviour is global mods can't remove admins unless the admin specially gives the permission to manage forum (which is actually making the mod an admin practically).
Home of Elmacik

Arantor

QuoteAnd as Arantor stated, new behaviour is global mods can't remove admins unless the admin specially gives the permission to manage forum (which is actually making the mod an admin practically).

Not quite. It's not actually admin_forum.

As of RC4, groups can be set to protected, which means one can only remove that group from another user if the person performing the action is either proper admin (group 1) or belongs to that group and also has manage-membergroups permission.

It also can't be assigned in a similar fashion.
No good deed goes unpunished
All helpful urges should be circumvented

Elmacik

Admins (group 1) do automatically have all the permissions including manage-membergroups. Plus, any membergroup can have the manage mamabergroups permission that admin may decide; will be able to manage members and the groups. That's why I said as you stated, SMF has changed the default behaviour, which previously allowed any member group that has the permission delete the admin accounts.
Home of Elmacik

Arantor

I was just confirming when it happened, but before RC4, I thought only group 1 users could add/remove group 1, it was more the case that you could create a group with all permissions that would not be so protected.
No good deed goes unpunished
All helpful urges should be circumvented

Arantor

This is, ultimately, not a bug. It is as designed and I'd argue that the reverse is actually less obvious in terms of how it works. Especially if you want to have the situation of a moderator/admin posting a topic that needs to be updated regularly... this isn't something you can readily do particularly well outside of 'all or nothing'.

The problem with implementing such protected posts is that you then need to consider multiple levels of protection... what if you have a global moderator post, can that be edited by board moderators? etc. etc.
No good deed goes unpunished
All helpful urges should be circumvented

Advertisement: