# Security - negative rights (how?)

**URL:** https://meta.discourse.org/t/security-negative-rights-how/303817
**Category:** Feature
**Created:** [April 15, 2024, 7:39am UTC](https://meta.discourse.org/t/security-negative-rights-how/303817 "2024-04-15T07:39:27Z")
**Posts on this page:** 1
**Showing post:** 1

<div class="post-metadata">

### Author: ![Peter\_Backgren](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/peter_backgren/32/66263_2.png) [@Peter\_Backgren](https://meta.discourse.org/u/Peter_Backgren)
#### Post date: [April 15, 2024, 7:39am UTC](https://meta.discourse.org/t/security-negative-rights-how/303817/1 "2024-04-15T07:39:27Z")

</div>

(why explained last)

We have Create and See rights etc. I would need an easy way to implement See for a group for the entire site, except a few areas, basically a negative right coming into effect at higher priority.

Just thinking out loud here, as testing all the possibilities I can think of would take some time. Kinda hoping someone would say, why don’t you do it this way…

I guess I could create a group that gets See rights only. I’m guessing Discourse might be smart enough that if someone has See rights and everyone Write rights that area would become See only for the group? This would be a kind of automatic negative right implementation (cheapest option), although not a logical one. The problem is, even if it worked, going through all areas adding a group for “nasty but needed” users would take some time.

Cannot remove a user from everyone, uhum.

Creating a new pseudo-everyone with everyone but misbehaving users would be massive work (maybe not with a script but still).

Like I said, thinking out loud trying to solve the problem… hoping I would get an ahaa moment really 😃 .

* * *

The actual problem is one user writing his posts into whatever area he is currently reading (often the newest post of anything). Not a biggie except the posts are so incoherent they are bound to disturb other users. Problem is, he is absolutely needed in one area (100%, money area) but I’d be happy to close him out into seeing mode _everywhere_ else.

Most of the forum consist of locked areas, thankfully, but people still get weekly mails or whatever when he spreads into one of the few common areas.

---

_[View the full topic](https://meta.discourse.org/t/security-negative-rights-how/303817)._