How to apply permissions for users NOT in a group?

CyberGene

Sorry for the confusing title. Here’s my need: I want to create a new group called “Newbies” or something for newly registered users (is it the Auto Moderator that will assign that group to new users?). I want to disable private messaging and FoF uploading for that group. How do I set that? Because I see permissions are inclusive, i.e. you specify which group has the permission. However I would like to negate that and allow those permissions for “Users” except when they are “Newbies”. My understanding is that all people are Users, so when I allow private messaging to Users, the Newbies will also get it.

Or the question could be rephrased as: if I create a custom group, do the users that belong to it are also “Users”?

clarkwinkelmann

CyberGene you can't do it natively in Flarum. The permission grid is additive, you can only give, not remove.

Except in tag scopes, where the lesser tag scope is applied, which can be more restrictive than the global.

An extension could be created that allows negative permission scoping based on a group instead of a tag, but none exist as far as I'm aware.

The only native solution is to give every other group the permission, which requires placing all users into a real group. The virtual "Members" group visible on the Permissions page is automatically given to every activated user so it cannot be manually removed from already activated users (an extension could remove it though, that's what Suspend does).

maciuc

I'm writing here because my problem is similar.
I'm banging my head against the keyboard for 3 days by now to understand the permission scoping and I'm an IT guy I should know a thing or two.

I want the topics tagged by "Approved" to be public (visible without login).
I want topics tagged by "Energy" to be visible only to members.
I set that in permissions restrict by tag and that seems to work, but does not.

If a topic is tagged only Approved it is visible to the public.
If I add a second primary tag say "Energy", it becomes invisible to the public.
The idea was: When the topic is "matured enough" a moderator can make it public.
My understanding is because Energy is members-only tag it overwrites/restricts Approved public visibility.

So, the question title is:

How do I make a topic public when it is already private?

2.Would you please rephrase/explain in 3 bullettpoins:

user "permisions are inclusive"
tag scopes, "can be more restrictive than the global"
suggest any other permission/restriction extension that can be used with my problem

clarkwinkelmann

maciuc I don't think there's any solution to your situation that doesn't involve removing tags to achieve a result.

You could make all your users start new discussions in a special restricted tag, and then move it to another tag when it should become public. You could also use the extension API to automatically add a specific secondary tag to all new discussions so users don't have to select it.

If you want to keep the additional tags for SEO/structure, you could remove permissions from those tags and instead apply permissions to secondary tags. You could then even hide those secondary tags with CSS or something.

Basically, with Flarum's native permission system, as soon as you add a tag with restricted access, it will take precedence over everything else. The restricted tag can't stay on the discussion if you want to make it visible to more people.