Advertisement:

Author Topic: Forum shows despite custom permission  (Read 419 times)

Offline hidaka

  • Newbie
  • *
  • Posts: 7
Forum shows despite custom permission
« on: July 05, 2019, 02:29:33 AM »
Hi, I'm getting frustrated and I have no idea what I'm doing wrong. I've created a new member group called "Identity Protect" for a specific user; Anonymous. I've set the permissions for this user to only be able to access one specific forum thread. The first time I logged in the account to check if it was successful, it was. It only showed the thread I wanted that user to access. Then after I've logged in using my own admin account (where I started creating posts), and logged back in using the Anonymous account, it now shows the entire forum board. :-\

Any help would be highly appreciated... I've attached a screenshot from my admin panel just in case.
Many thanks in advance!

Offline lurkalot

  • Support Specialist
  • SMF Hero
  • *
  • Posts: 1,436
  • Gender: Male
  • Tinyportal Support
    • guitaristguild on Facebook
    • Tinyportal on GitHub
    • @GuitaristGuild on Twitter
    • Guitarist Guild
Re: Forum shows despite custom permission
« Reply #1 on: July 05, 2019, 03:44:09 AM »
Allowed groups at the bottom, shouldn't you have the Identity Protect group checked, and the others unchecked?  I'm in a bit of a rush, so might not have read this properly.  If that's not the case I'm sure someone will jump in and help you.

Offline hidaka

  • Newbie
  • *
  • Posts: 7
Re: Forum shows despite custom permission
« Reply #2 on: July 05, 2019, 03:56:19 AM »
Allowed groups at the bottom, shouldn't you have the Identity Protect group checked, and the others unchecked?  I'm in a bit of a rush, so might not have read this properly.  If that's not the case I'm sure someone will jump in and help you.

Hi, the allowed groups at the bottom are the groups for the rest of the forum threads that the Identity Protect shouldn't be able to access, that is why Identity Protect is not checked. As the Questions for the Staff forum, that's where the Identity Protect is only checked with the rest of other allowed groups.

Many thanks though ;)

[EDIT]
I think the reason why the Anonymous account can see the entire forum despite unchecking Identity Protect group is because Anonymous is considered (and probably included) a Newbie group member? I tried unchecking the Newbie group and the forum is no longer accessible to Anonymous... but I have no idea how to remove the Anonymous account under the Newbie group if that's the case.
« Last Edit: July 05, 2019, 04:39:20 AM by hidaka »

Offline Illori

  • Project Manager
  • SMF Legend
  • *
  • Posts: 51,266
Re: Forum shows despite custom permission
« Reply #3 on: July 05, 2019, 05:01:03 AM »
all users are in 2 groups, their primary group and a post count group. you cannot remove them from the post count groups.

you say that this group should be able to see one "thread", do you mean that this group should only be able to see one board? SMF has no way to restrict who can see a topic.

Offline hidaka

  • Newbie
  • *
  • Posts: 7
Re: Forum shows despite custom permission
« Reply #4 on: July 05, 2019, 09:04:13 AM »
all users are in 2 groups, their primary group and a post count group. you cannot remove them from the post count groups.

you say that this group should be able to see one "thread", do you mean that this group should only be able to see one board? SMF has no way to restrict who can see a topic.

Okay, I understand. I'll use the post anonymously mod instead.
Thank you so much for clarifying this! :laugh:

Offline Aleksi "Lex" Kilpinen

  • A Peculiar Finn
  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 18,618
  • Gender: Male
  • Don't worry, I'm n00b friendly
    • Aleksi.Kilpinen on Facebook
    • LexArma on GitHub
    • aleksi-kilpinen on LinkedIn
    • There's No Place Like 127.0.0.1
Re: Forum shows despite custom permission
« Reply #5 on: July 05, 2019, 09:12:04 AM »
You could do this with permissions as well, but it would take careful planning and possibly reworking all access permissions for all boards as 2.0 permissions work so that if any group you belong to has access, then you will have access. 2.1 I believe will actually allow you to do this more simply, by denying access to a specific grouo.
A Finnish Support Specialist
 Happily running multiple SMF 2.0 installations.
  Fooling around with an i7 990X @ 3,47Ghz / 12Gb / Win 10 x64 / 3840x2160


How you can help SMF

"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum.
 Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

Offline hidaka

  • Newbie
  • *
  • Posts: 7
Re: Forum shows despite custom permission
« Reply #6 on: July 05, 2019, 09:18:30 AM »
You could do this with permissions as well, but it would take careful planning and possibly reworking all access permissions for all boards as 2.0 permissions work so that if any group you belong to has access, then you will have access. 2.1 I believe will actually allow you to do this more simply, by denying access to a specific grouo.

Well, I have 2.0.15 installed... and as I've mentioned from the beginning, I was able to accomplish it once (after creating the member group). I've tried recreating it again a while ago and it was successful again. I don't know why for some reason, after third or nth login using the Anonymous account, all the forum threads shows up again instead of just two forum threads. :-\

Offline Aleksi "Lex" Kilpinen

  • A Peculiar Finn
  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 18,618
  • Gender: Male
  • Don't worry, I'm n00b friendly
    • Aleksi.Kilpinen on Facebook
    • LexArma on GitHub
    • aleksi-kilpinen on LinkedIn
    • There's No Place Like 127.0.0.1
Re: Forum shows despite custom permission
« Reply #7 on: July 05, 2019, 09:30:52 AM »
In your picture, post count groups have access - so basically everyone has access.
A Finnish Support Specialist
 Happily running multiple SMF 2.0 installations.
  Fooling around with an i7 990X @ 3,47Ghz / 12Gb / Win 10 x64 / 3840x2160


How you can help SMF

"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum.
 Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,500
  • Gender: Male
    • Kindred-999 on GitHub
Re: Forum shows despite custom permission
« Reply #8 on: July 05, 2019, 09:44:56 AM »
Additionally, unless you have a mod, you can not (not in 1.1.x, not in 2.0.x and not in 2.1.x) restrict permissions by THREAD.

SMF Permissions are granular to the BOARD level, not the thread level.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

Offline hidaka

  • Newbie
  • *
  • Posts: 7
Re: Forum shows despite custom permission
« Reply #9 on: July 05, 2019, 10:02:35 AM »
Additionally, unless you have a mod, you can not (not in 1.1.x, not in 2.0.x and not in 2.1.x) restrict permissions by THREAD.

SMF Permissions are granular to the BOARD level, not the thread level.

Hi, I apologize for the confusion... I meant the forum board. Sorry, I was used to refer threads as "forum boards," not topics.  ^^;

Offline Kindred

  • The Mean One
  • Support Specialist
  • SMF Legend
  • *
  • Posts: 58,500
  • Gender: Male
    • Kindred-999 on GitHub
Re: Forum shows despite custom permission
« Reply #10 on: July 05, 2019, 11:25:08 AM »
in that case...   it's pretty darned easy to do what you want.

change all post-count based permissions to "disallow"   (which is different from deny)
and remove the post-count based access to that board

then whatever you set to "allow" for the non-post-count-based groups will be the permissions to take effect.
Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.