Advanced permissions

vrrdnt

Hey there,

I'm currently configuring permissions on my Forum.

I noticed that if you specify that a tag needs a specific group to be viewable, then when a user is added to that group, they can see that tag. That works great!

However, I'd like to make it a little more advanced. My forum uses admin ranks, and it ascends like this: Super Admin, Telnet Admin, Senior Admin, etc. I've given each rank a board, and each group can see all boards below their respective rank, with Senior Admin being able to see their own board as well as Telnet and Super admin boards. I have also added a group called Forum Admin and Forum Moderator. I want Forum Admin to have a lot of power - they have access to most permissions. Forum Moderator cleans posts, removes inappropriate posts, etc.

I noticed that if a user is, for example, a Telnet Admin and a Forum Moderator, they can see the Senior Admin board, because all tags have an enabled Forum Moderator group.

My question for you all is if it's possible to require that a user have all active permissions to view a board. For example, said user is a Telnet Admin and a Forum Moderator, but they can't see above the Telnet board, because they aren't in the Senior Admin group, even though all boards have an enabled Forum Moderator group.

Any ideas/suggestions? I know this post is likely a bit confusing - I'd love to clarify anything if necessary.

My permissions page:

clarkwinkelmann

vrrdnt what permissions did you give to Forum Moderator ? If you don't give them any "view" permission, I think they shouldn't see the tags unless they have the other group that gives view/read access there.

jordanjay29

vrrdnt Can you post a screenshot of your Permissions page as well?

vrrdnt

clarkwinkelmann If Forum Moderator doesn't have the view permission for a tag, the group can't be added to any other relevant permission for that tag.

For example - the top screenshot is the list of groups that can view the Super Admins tag. I cannot add Forum Moderator to the Rename Discussions permission below, because that group can't view it.

vrrdnt

jordanjay29 I've added my permissions page to the original post.

vrrdnt

jordanjay29 Do you happen to have any ideas about this? I haven't been able to get permissions to work in the way I've described above.

cmcjacob

To expand on this, I think it would be useful to have two distinct view permissions: view on discussion list, and view post.

I had to edit permissions in an extension due to similar view restrictions, and agree this constraint could be loosened a bit.

vrrdnt

cmcjacob What extension, if you don't mind me asking?

cmcjacob

vrrdnt A private paywall extension (unpublished). If you are looking for a related feature, one option is to contract my services on flarum's discord. Alternatively, you may look into extending core permissions.