Hello! I want to change user groups permissions, for example: Admin Group - all permissions Co Admin - can do anything but cannot open some sections on admin pane How to do that? Thanks!

It’s not that I don’t trust them. But when it comes to our threat model, it creates an additional attack surface. What if the specific user gets compromised due to lack of security on his side? A lot of variables at play. We will explore plugin option then.

Agreed Discourse needs extra controls for customization. Like what others have mentioned with hiring outside contractors to use higher level functions while still protecting members information. Group moderation is decent but sometimes you might want some higher functions of a full Mod but not all…

[Bild] Heliosurge: A plugin indeed might be helpful. I agree with others here that the access control model would be improved with an extra layer of RBAC (roles-based access control) granularity that specifies what staff and admin can access (for certain functions, not all). For example, a s…

[Bild] jrgong: have same use case where I want to grant theme access and house ads access to some of my staff members. Hi @jrgong This is not difficult to do via a plugin, as you probably know well. Basically, you could create a list of staff (by email, username, etc) as a global setting, s…

Thx @neounix I really appreciate the input! I will get a dev to get it done edit: Is there no other way but to fork the plugin? And how about access to babble chat plugin? That would also require a fork?

[Bild] jrgong: edit: Is there no other way but to fork the plugin? We are taking about software. There are always many ways to do things. I provided you my recommendations. :slight_smile:

Sorry old post but why don’t you set up your theme as a repo in GitHub? Permission your design and UX team to have access to update the Theme in GitHub. In Discourse you can now set Themes to auto update upon rebuild. Your admins will now only need to rebuild to bring in any changes made by the De…

Just a short note: When coding matters of access control, in general, these RBAC checks should be performed on the server side. RBAC code in client-side Javascript can be manipulated by the client. This means that when defining core RBAC permissions for staff, admins and moderators, this should b…

There is also trust level 4 and category moderators, in discourse 2.5 and beyond.

[Bild] dgateles: We have UX and Design teams and they are only responsible for that area, so only access to the themes would be necessary. I have a similar use case, in that I run a small non-profit community where one of our users is maintaining the themes and design. I do not wish to give …

So definieren Sie benutzerdefinierte Berechtigungen für Staff, Admins und Moderatoren

Unterstützung

neounix (Dark Matter) 12. Dezember 2020 um 11:34 20

Wir sprechen über Software.

Es gibt immer viele Wege, Dinge zu tun.

Ich habe dir meine Empfehlungen gegeben.

Thema		Antworten	Aufrufe
Admin Restrictions? Feature	22	6873	17. Oktober 2024
Grant customization rights to a non-admin Support	3	523	31. März 2023
Restrict themes to certain groups? Support	6	1297	14. Mai 2019
Allow moderators to create groups Feature	47	8909	11. April 2023
How i can manage roles for moderators and administrators? Support	4	1368	12. Juni 2022

So definieren Sie benutzerdefinierte Berechtigungen für Staff, Admins und Moderatoren

Verwandte Themen