As exampe if neen give acces to administrator or moderator to themes function but as example dissable acces to see api secrects from socials logins. and separate moderators as example give moderator role to some people in community branch at forum to trusted people from community with restrictions…

Hi :slight_smile: If I understand correctly you are asking whether Discourse offers permissions for moderators. If this is the case this is not possible. You are either Staff (Admin or Moderator), category moderator or TL4 Leader Have a read of this topic [image] Understanding user statuses, roles, and permissions Site Management bookmark This is a guide for understanding the various user statuses, roles, and permissions within Discourse, including how they affect user capabilities and how they are stored in the database. person_raising_hand Required user level: Administrator Discourse has many built-in user statuses, roles, and permissions. These statuses and roles can be seen for a given user when viewing their profile from the users’ section of the admin dashboard: [admin-dashboard-user-permissions] Permi… [image] Bitweb Core: separate moderators as example give moderator role to some people in community branch at forum to trusted people from community with restrictions… I think category moderators or Leaders would work well here.

[image] Bitweb Core: administrator or moderator to themes function Anyone with write access to the themes can completely hijack a users session. If you don’t trust someone doing that, you should not trust them at all. And if you do trust them, you can just make them admin.

That was how example , more clear i don’t want give access where api keys’ but give to other to other settings sections. For prevent that admin from copy that keys and use some where at 3rd place at future as example for testing some thing not necessarily even for evil intentions, yet this is quite an alarming section in the case of, for example, a github key. The administrator may not be related to the repository at all, but administer the forum if necessary. But I didn’t want him to accidentally compromise the keys, simply by “copy them and then they be stolen from him.” or mistake remove them. because of laziness to get your own, and in the case of tweeter and google, everything is rather contradictory there, since those keys are not now distributed to the all who write “i want acess”, and even an accidental compromise of keys can lead to disabling access to the api.

How i can manage roles for moderators and administrators?

Product Support

Bitweb_Core (Bitweb Core) June 12, 2022, 10:43pm 5

how solution pages like that can be protected with extra password at next releases if need

I think it’s better think about all possible vulnerabilities and prevent even if it’s unlikely

Topic		Replies	Views
Modifying Staff Roles to go beyond Administrator and Moderator? Feature moderation	8	7734	December 31, 2017
How to define custom permissions for staff, admins, moderators Product Support	33	4181	March 9, 2023
Understanding user statuses, roles, and permissions Site Management reference , users	0	32915	November 2, 2015
Allow category moderators to manage sub-categories Feature category-moderators , spaces	16	1837	November 24, 2025
Add moderator for specific category or subcategory Feature completed , category-moderators	35	9963	August 5, 2020

How i can manage roles for moderators and administrators?

Related topics