Hello! I want to change user groups permissions, for example: Admin Group - all permissions Co Admin - can do anything but cannot open some sections on admin pane How to do that? Thanks!

It’s not that I don’t trust them. But when it comes to our threat model, it creates an additional attack surface. What if the specific user gets compromised due to lack of security on his side? A lot of variables at play. We will explore plugin option then.

Agreed Discourse needs extra controls for customization. Like what others have mentioned with hiring outside contractors to use higher level functions while still protecting members information. Group moderation is decent but sometimes you might want some higher functions of a full Mod but not all…

[صورة] Heliosurge: A plugin indeed might be helpful. I agree with others here that the access control model would be improved with an extra layer of RBAC (roles-based access control) granularity that specifies what staff and admin can access (for certain functions, not all). For example, a s…

[صورة] jrgong: have same use case where I want to grant theme access and house ads access to some of my staff members. Hi @jrgong This is not difficult to do via a plugin, as you probably know well. Basically, you could create a list of staff (by email, username, etc) as a global setting, s…

Thx @neounix I really appreciate the input! I will get a dev to get it done edit: Is there no other way but to fork the plugin? And how about access to babble chat plugin? That would also require a fork?

[صورة] jrgong: edit: Is there no other way but to fork the plugin? We are taking about software. There are always many ways to do things. I provided you my recommendations. :slight_smile:

Sorry old post but why don’t you set up your theme as a repo in GitHub? Permission your design and UX team to have access to update the Theme in GitHub. In Discourse you can now set Themes to auto update upon rebuild. Your admins will now only need to rebuild to bring in any changes made by the De…

Just a short note: When coding matters of access control, in general, these RBAC checks should be performed on the server side. RBAC code in client-side Javascript can be manipulated by the client. This means that when defining core RBAC permissions for staff, admins and moderators, this should b…

There is also trust level 4 and category moderators, in discourse 2.5 and beyond.

[صورة] dgateles: We have UX and Design teams and they are only responsible for that area, so only access to the themes would be necessary. I have a similar use case, in that I run a small non-profit community where one of our users is maintaining the themes and design. I do not wish to give …

كيفية تحديد أذونات مخصصة للموظفين والمدراء والمشرفين

الدعم

neounix (Dark Matter) 12 ديسمبر 2020، 11:34ص 20

نحن نتحدث عن البرمجيات.

هناك دائمًا طرق عديدة للقيام بالأشياء.

لقد قدمت لك توصياتي.

الموضوع		الردود	مرات العرض
Admin Restrictions? Feature	22	6873	17 أكتوبر 2024
Grant customization rights to a non-admin Support	3	523	31 مارس 2023
Restrict themes to certain groups? Support	6	1297	14 مايو 2019
Allow moderators to create groups Feature	47	8909	11 أبريل 2023
How i can manage roles for moderators and administrators? Support	4	1368	12 يونيو 2022

كيفية تحديد أذونات مخصصة للموظفين والمدراء والمشرفين

الموضوعات ذات الصلة