Trust Level Permissions Reference

Documentation Using Discourse
,
62

This doesn’t seem to be the case any more - in my site, it seems to be admins only (discovered after attempting to coach one of my mods to convert a topic to public). I can’t find a setting that governs this.

Not sure if this is a regression or is deliberate.

63

Hmmm, I just tested this and for me it’s still working as expected and allowing moderators to make a topic from a pm:

test user admin panel showing perimissions:

image
image749×127 3.55 KB

logged in as test user with PM to self:

image
image751×544 35.2 KB

image

Did you try it with a test moderator account?

2 Likes
64

Okay - I understand the issue now. It has to do with the interaction of deletion and changes to the admin menu of topics which don’t refresh until the page is reloaded. This is a bug (albeit it a very minor one).

To repro:

  1. Visit an existing Topic (can be a PM) with an account with moderator/admin privileges
  2. Delete the Topic
    • Note that the option to Make Public Topic / Make Personal Message remains visible
  3. Refresh the page
    • Note that the option to Make Public Topic / Make Personal Message is no longer present
  4. Undelete the Topic
    • the option to Make Public Topic / Make Personal Message remains absent until the page is refreshed

It seems like a page refresh is needed after deletion / undeletion of a topic. Perhaps this should be included in the action of topic deletion/undeletion?

5 Likes
68

It is real clear to understand.

2 Likes
69

There’s a green tick against TL0 for muting a user. Having had a quick run through for this topic Which roles are allowed to mute other users? - #4 by JammyDodger, it seems this is a TL1 ability. Could someone update the doc. :folded_hands:

Also, ‘staff notices’ has had a name change too.

5 Likes
70

Thanks Jammy :folded_hands: - I’ve updated the OP. :slight_smile:

3 Likes
71

I don’t see a listing here for what the trust level is for authorizing user API access (as mentioned here: "Sorry, you do not have the required trust level to access the user API" when on iOS). Based on that, it seems that 0 is the minimum level, but it can be configured as well. Can that be documented here? Or did I not read well enough?

1 Like
72

Welcome to Meta :waving_hand:

I think you are right; the permission and the related setting aren’t included in the table.

The user_API_key_allowed_groups setting’s default is trust level 0. The admin and moderator groups cannot be removed from the setting. However, to limit permissions, admins can remove the trust level 0 group, which includes all users who signed up. Then only staff are allowed to use the user API. They can also add other groups to restrict access to specific groups.

Screenshot_20250606_173719_Firefox
Screenshot_20250606_173719_Firefox1309×236 75.9 KB

2 Likes