Uutiset:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu
Advertisement:

[FREE] "Maintenance Team" mod

Aloittaja Sci-Fi_Fan, elokuu 09, 2011, 01:45:01 IP

« edellinen - seuraava »

Sci-Fi_Fan

Free/Paid:
Free

Version:
2.0

Description:
A simple mod to allow admins to create a "maintenance team" and be able to oversee it via a "maintenance center."

For example, I would like to be able to allow x number of members access to the forum maintenance tools to carry out regular backups and such, yet I don't want them to be able to see or modify any of the boards/features/themes etc settings on the admin panel. Unless I am mistaken, there is currently no way to achieve this without allowing the user access to the above restricted settings.

Permissions:
As above.

Feature Set:
I want to be able to have control over my "maintenance team" and what they can view. By having a "maintenance center", I can view the members with these permissions and what they have done recently in terms of forum maintenance and add or remove other members within the team.
ShadowFleet.org - more than just a Star Trek RPG!

Illori

please do not link to threads in this board from feature requests when what you want is limited to your exact forum and not something that would fit in all forums that use smf. your other thread has been deleted.

karlbenson

If you give them access to backups whether just files AND/OR the sql then no matter how you limit their ability in smf they can literally take control of your website.

From the files (settings.php) they can get your smf database info including password, login to your database and make themselves the admin (or worse corrupt your database)
From the sql they can get the hashed password AND the salt key with which to try to crack your admin password or any other member and take control of their account.

Then only solution I can forsee with backups is automating the process without any involvement of members and certainly not giving them keys to your forum.

Mari-chi

I think there's a mod that allows you to give specific membergroups access to a site, even when it's under maintenance mode. I could be imagining it, though... Check the mod site? :3

Illori

that is not what they want, they want a mod that allows the users to have more control but less then what admin has.

Mari-chi

Ahhh I see. Sorry, I was half-asleep while reading the OP's post last night1

Sci-Fi_Fan

#6
Lainaus käyttäjältä: Illori - elokuu 09, 2011, 02:35:14 IP
please do not link to threads in this board from feature requests when what you want is limited to your exact forum and not something that would fit in all forums that use smf. your other thread has been deleted.

Apologies! I'm new around here.

Lainaus käyttäjältä: karlbenson - elokuu 09, 2011, 05:29:48 IP
If you give them access to backups whether just files AND/OR the sql then no matter how you limit their ability in smf they can literally take control of your website.

From the files (settings.php) they can get your smf database info including password, login to your database and make themselves the admin (or worse corrupt your database)
From the sql they can get the hashed password AND the salt key with which to try to crack your admin password or any other member and take control of their account.

Then only solution I can forsee with backups is automating the process without any involvement of members and certainly not giving them keys to your forum.

I see what you mean about that, but I am talking about giving this "backup" access to trusted members that aren't admins. Perhaps there could be a feature that applies a password to the file in question, which is preset by an admin and not given to the maintenance team members?
ShadowFleet.org - more than just a Star Trek RPG!

Advertisement: