Hello! I want to change user groups permissions, for example: Admin Group - all permissions Co Admin - can do anything but cannot open some sections on admin pane How to do that? Thanks!

It’s not that I don’t trust them. But when it comes to our threat model, it creates an additional attack surface. What if the specific user gets compromised due to lack of security on his side? A lot of variables at play. We will explore plugin option then.

Agreed Discourse needs extra controls for customization. Like what others have mentioned with hiring outside contractors to use higher level functions while still protecting members information. Group moderation is decent but sometimes you might want some higher functions of a full Mod but not all…

[image] Heliosurge: A plugin indeed might be helpful. I agree with others here that the access control model would be improved with an extra layer of RBAC (roles-based access control) granularity that specifies what staff and admin can access (for certain functions, not all). For example, a …

[image] jrgong: have same use case where I want to grant theme access and house ads access to some of my staff members. Hi @jrgong This is not difficult to do via a plugin, as you probably know well. Basically, you could create a list of staff (by email, username, etc) as a global setting, …

Thx @neounix I really appreciate the input! I will get a dev to get it done edit: Is there no other way but to fork the plugin? And how about access to babble chat plugin? That would also require a fork?

Sorry old post but why don’t you set up your theme as a repo in GitHub? Permission your design and UX team to have access to update the Theme in GitHub. In Discourse you can now set Themes to auto update upon rebuild. Your admins will now only need to rebuild to bring in any changes made by the De…

Just a short note: When coding matters of access control, in general, these RBAC checks should be performed on the server side. RBAC code in client-side Javascript can be manipulated by the client. This means that when defining core RBAC permissions for staff, admins and moderators, this should b…

There is also trust level 4 and category moderators, in discourse 2.5 and beyond.

[image] dgateles: We have UX and Design teams and they are only responsible for that area, so only access to the themes would be necessary. I have a similar use case, in that I run a small non-profit community where one of our users is maintaining the themes and design. I do not wish to give…

How to define custom permissions for staff, admins, moderators

Support

neounix (Dark Matter) December 12, 2020, 11:34am 20

We are taking about software.

There are always many ways to do things.

I provided you my recommendations.

Topic		Replies	Views
Admin Restrictions? Feature	22	6873	October 17, 2024
Grant customization rights to a non-admin Support	3	523	March 31, 2023
Restrict themes to certain groups? Support	6	1298	May 14, 2019
Allow moderators to create groups Feature	47	8911	April 11, 2023
How i can manage roles for moderators and administrators? Support	4	1368	June 12, 2022

How to define custom permissions for staff, admins, moderators

Related topics