board access permissions for membergroups

[RFD]

membergroup A has all 22 forum boards selected to be seen and accessed.

membergroup B has 1 special board excluded and should only see and access the remaining 21 boards.  that one special excluded board does not allow membergroup B.

however, a user assigned only to membergroup B still can still see and access all 22 boards!

what's wrong?

[Illori]

check which boards the post count based groups can see, remember everyone is in at least 2 groups. a primary group and a post count group.

[RFD]

this is where i get lost, so please let me revise the scenario ...

there are 4 forum boards - A, B, C, D

the single post count membergroup "ALPHA" only allow viewing/access of A and B.

regular membergroup "BETA" allows viewing/access of all boards A, B, C, D.

the above works just fine.

regular new membergroup "OMEGA" is created that allows viewing/access of only boards A and B, yet "OMEGA" can still view/access board C.

[Kindred]

because the OMEGA user is *ALSO* in the post-count group ALPHA

[RFD]

okay, my bad on the scenario portrayal, which should be ...

there are 4 forum boards - A, B, C, D

the single post count membergroup "ALPHA" only allow viewing/access of A and B.

regular membergroup "BETA" allows viewing/access of all boards A, B, C, D.

the above works just fine.

regular new membergroup "OMEGA" is created that allows viewing/access of only boards B and C, yet "OMEGA" can still view/access board A.

here's the thing - post count membergroup ALPHA is where "regular" members live and they require access to board A.

do i need to create a new regular membergroup that mirrors the post count member group ALPHA and move all 40k+ users?

[Kindred]

Essentially, yes.


SMF membergroup permissions are INCLUSIVE.
If a user belongs to *ANY* group that has access to a permission (or board), then that user will have access to that permission (or board)

So, using post-count membergroups to control access is fine...   unless you intend for people to NOT have access -- because in 2.0.x, there is no deny access permission with regards to board access.  and your setup (with only one post-count group) won't allow you to forbid access to anyone.
(I have a board that is only accessible to users after they hit 1000 posts, and I have a board which is only accessible to users who have under 10 posts -- but I never set access to any other board based on post-count)

[RFD]

i've tried a number of different regular and post count membergroups in copy of my live forum.  when i create a second post count membergroup, it appears as if all the users from the first (original) post count group are automatically assigned this new post count group.  how are the two post count membergroups differentiated?

[Illori]

depends on how many posts you define for each group.

[Kindred]

for example, on one site I have

Raw Recruit (starts at 0 posts)
Bootcamper (starts at 10 posts)
Enlisted (starts at 50 posts)
Officer (starts at 200 posts)
Veteran (started at 500 posts)
Ancient (starts at 2,000 posts)
Elder God (starts at 50,000 posts)

[RFD]

i don't understand what setting the post count number for one of the post count membergroups has to do with any of what i'm trying to accomplish, which is, to create a new regular membergroup that does not have access to one of the boards in the one and only post count membergroup. 

if i create another (new) post count membergroup, which i have as you can see my previous post's attachment, and this new membergroup doesn't have the board that i wish to exclude access to from the newly created regular membergroup, how does this new regular membergroup "point" to the new post count membergroup?

[Kindred]

It does not.

Post count groups are separate.
And you will ALWAYS have this problem,  if you have a board access controlled by a post count group..

[RFD]

It does not.

Post count groups are separate.
And you will ALWAYS have this problem,  if you have a board access controlled by a post count group..

ok, gotcha, as i expected. 

how do i move all the post count membergroup members to a new regular membergroup?

[Illori]

you cannot. everyone has to be in a post count group. you cannot take them out of a post count group.

[RFD]

you cannot. everyone has to be in a post count group. you cannot take them out of a post count group.

is there a reasonable solution for the creation of a regular group that will not allow access to a specific board that's allowed in the post count group?

[Illori]

set the access per the normal groups and don't grant access in the post count groups.

[RFD]

set the access per the normal groups and don't grant access in the post count groups.

create a new regular membergroup, but don't grant its access to that special board that's currently in the post count membergroup?  if so, that fails.

[Illori]

if the post count based group gives access and the user has enough posts to be in that group, they will ALWAYS have access.

[RFD]

if the post count based group gives access and the user has enough posts to be in that group, they will ALWAYS have access.

then what did you mean by "set the access per the normal groups and don't grant access in the post count groups."?

[Illori]

don't give access to any boards in the post count groups, only grant the access via the normal groups, this way the number of posts will have NOTHING to do with the boards the user has access to.

[RFD]

don't give access to any boards in the post count groups, only grant the access via the normal groups, this way the number of posts will have NOTHING to do with the boards the user has access to.

yes, understood - as i asked before, how do i move 40k users into a newly created regular membergroup?