Hello! I want to change user groups permissions, for example: Admin Group - all permissions Co Admin - can do anything but cannot open some sections on admin pane How to do that? Thanks!

[image] pfaffman: What you are asking is, "Is there something like ‘moderators can crash the whole site by making a broken theme?’ ". I’m pretty sure that the answer is going to be “No.” You do not know who will tinker with the themes, how can you make that statement? I asked this question b…

My point is that if you trust someone enough to change themes then you can make them an admin. If you would like to allow non-admins to modify themes or otherwise change what a moderator can do you’ll need a custom plugin.

[image] pfaffman: My point is that if you trust someone enough to change themes then you can make them an admin. Not in my current scenario. We have UX and Design teams and they are only responsible for that area, so only access to the themes would be necessary.

We have this same use case as well. We have outside contractors (web designers) that we want to grant access to this. An full admin would have access to everything, including private management discussions, which is something not desirable. It would be nice to have a workflow that allows web desi…

[image] Joaquin_Menchacha: It would be nice to have a workflow that allows web designers submit or try changes without full admin access. Hi @Joaquin_Menchacha Thank you for your post and reminder on this topic. We also wish (plan) to refine some of the admin controls in the future. For ex…

The easy solution is to trust people and make them an admin or moderator. It you don’t trust them with full control, but want them to have additional access then you’ll need a plugin.

It’s not that I don’t trust them. But when it comes to our threat model, it creates an additional attack surface. What if the specific user gets compromised due to lack of security on his side? A lot of variables at play. We will explore plugin option then.

Agreed Discourse needs extra controls for customization. Like what others have mentioned with hiring outside contractors to use higher level functions while still protecting members information. Group moderation is decent but sometimes you might want some higher functions of a full Mod but not all…

[image] Heliosurge: A plugin indeed might be helpful. I agree with others here that the access control model would be improved with an extra layer of RBAC (roles-based access control) granularity that specifies what staff and admin can access (for certain functions, not all). For example, a …

How to define custom permissions for staff, admins, moderators

Support

jrgong (jrgong) December 10, 2020, 2:46pm 13

Has any one found a solution here?

I have same use case where I want to grant theme access and house ads access to some of my staff members.

Topic		Replies	Views
Admin Restrictions? Feature	22	6872	October 17, 2024
Grant customization rights to a non-admin Support	3	522	March 31, 2023
Restrict themes to certain groups? Support	6	1296	May 14, 2019
Allow moderators to create groups Feature	47	8907	April 11, 2023
How i can manage roles for moderators and administrators? Support	4	1367	June 12, 2022

How to define custom permissions for staff, admins, moderators

Related topics