Hello! I want to change user groups permissions, for example: Admin Group - all permissions Co Admin - can do anything but cannot open some sections on admin pane How to do that? Thanks!

It’s not that I don’t trust them. But when it comes to our threat model, it creates an additional attack surface. What if the specific user gets compromised due to lack of security on his side? A lot of variables at play. We will explore plugin option then.

Agreed Discourse needs extra controls for customization. Like what others have mentioned with hiring outside contractors to use higher level functions while still protecting members information. Group moderation is decent but sometimes you might want some higher functions of a full Mod but not all…

[이미지] Heliosurge: A plugin indeed might be helpful. I agree with others here that the access control model would be improved with an extra layer of RBAC (roles-based access control) granularity that specifies what staff and admin can access (for certain functions, not all). For example, a si…

[이미지] jrgong: have same use case where I want to grant theme access and house ads access to some of my staff members. Hi @jrgong This is not difficult to do via a plugin, as you probably know well. Basically, you could create a list of staff (by email, username, etc) as a global setting, si…

Thx @neounix I really appreciate the input! I will get a dev to get it done edit: Is there no other way but to fork the plugin? And how about access to babble chat plugin? That would also require a fork?

[이미지] jrgong: edit: Is there no other way but to fork the plugin? We are taking about software. There are always many ways to do things. I provided you my recommendations. :slight_smile:

Sorry old post but why don’t you set up your theme as a repo in GitHub? Permission your design and UX team to have access to update the Theme in GitHub. In Discourse you can now set Themes to auto update upon rebuild. Your admins will now only need to rebuild to bring in any changes made by the De…

Just a short note: When coding matters of access control, in general, these RBAC checks should be performed on the server side. RBAC code in client-side Javascript can be manipulated by the client. This means that when defining core RBAC permissions for staff, admins and moderators, this should b…

There is also trust level 4 and category moderators, in discourse 2.5 and beyond.

[이미지] dgateles: We have UX and Design teams and they are only responsible for that area, so only access to the themes would be necessary. I have a similar use case, in that I run a small non-profit community where one of our users is maintaining the themes and design. I do not wish to give a…

How to define custom permissions for staff, admins, moderators

지원

neounix (Dark Matter) 12월 12, 2020, 11:34오전 20

우리는 소프트웨어에 대해 이야기하고 있습니다.

어떤 일을 처리하는 방법은 항상 여러 가지가 있습니다.

저는 제 추천 사항을 드렸습니다.

글		댓글	조회수
Admin Restrictions? Feature	22	6872	10월 17, 2024
Grant customization rights to a non-admin Support	3	522	3월 31, 2023
Restrict themes to certain groups? Support	6	1296	5월 14, 2019
Allow moderators to create groups Feature	47	8907	4월 11, 2023
How i can manage roles for moderators and administrators? Support	4	1367	6월 12, 2022

How to define custom permissions for staff, admins, moderators

Related topics