Restrict themes to certain groups?

Flower_Child · May 19, 2018, 2:22am

I’d like a way to restrict themes to particular groups - for example, I’m hoping to give the donators group access to certain exclusive themes and ones that aren’t ready to be released publicly. There any way to do this?

HAWK · May 20, 2018, 9:16pm

That isn’t currently possible, no.

John123 · May 20, 2018, 9:36pm

That would be a great feature, I wonder if there is a way to develop such a plug-in independently. Also if there were a way to label tags that come from different types of users (or at least differentiate between admin and members. What do you think about that?:grinning

sam · May 21, 2018, 12:37am

It could be done in a plugin, it is rather tricky, but doable.

Flower_Child · May 22, 2018, 12:04am

would definitely be useful. got any pointers on how a plugin could work?

david · May 22, 2018, 12:11am

As a starting point, you could have a look at how theme access is overridden for the theme-creator.discourse.org system:

github.com/discourse/discourse-theme-creator

plugin.rb

933a72c6f


      
          # Override guardian to allow users to preview their own themes using the ?preview_theme_key= variable
          add_to_class(:guardian, :allow_theme?) do |theme_key|
            return true if Theme.user_theme_keys.include?(theme_key) # Is a 'user selectable theme'
            return false if not Theme.theme_keys.include?(theme_key) # Is not a valid theme
          
            # If you own the theme, you are allowed to view it using GET param
            # Even staff are not allowed to use GET to access other user's themes, to reduce XSS attack risk
            can_hotlink_user_theme? Theme.find_by(key: theme_key)
          end

The allow_theme? method is used in Discourse’s application controller here:

github.com/discourse/discourse

app/controllers/application_controller.rb

661d89f48


      
          def handle_theme
          
            return if request.xhr? || request.format == "json" || request.format == "js"
            return if request.method != "GET"
          
            resolve_safe_mode
            return if request.env[NO_CUSTOM]
          
            theme_key = request[:preview_theme_key]
          
            user_option = current_user&.user_option
          
            unless theme_key
              key, seq = cookies[:theme_key]&.split(",")
              if key && seq && seq.to_i == user_option&.theme_key_seq.to_i
                theme_key = key
              end
            end
          
            theme_key ||= user_option&.theme_key

This file has been truncated. show original

As Sam said, what you want to do is possible, but it will require a fair amount of development work to get it working smoothly

WaitroseCarpark · May 14, 2019, 8:56am

I kind of did this and tied it to Patreon tiers

Topic		Replies	Views
Can I make a theme available to specific user groups only? Dev horizon-theme	11	193	April 21, 2025
How to define custom permissions for staff, admins, moderators Support	34	3554	April 29, 2023
Show/hide themes for specific groups? Support	16	1258	September 15, 2022
How to assign a theme to a group? Support	5	1175	June 8, 2024
Can I use a theme I created without allowing it to be used by others? Support	5	1117	January 19, 2021

Restrict themes to certain groups?

Related topics