Trust level security groups don't include higher levels


(Kane York) #1

Reproduction:

  • Create a new Discourse instance
  • Create a new, non-admin user, and assign them Trust Level 4
  • Log in as that user - they cannot see the [Lounge] category

Or:

  • Create a new category accessible to trust_level_2
  • Assign someone Trust Level 3 or 4
  • Log in as that user - they cannot access that category

[SEE ALSO: Discourse Meta @codinghorror ]





I suggest that the current TL groups are changed to mean “that trust level and any above it”, as right now the category permissions are one-dimensional (Create/Reply/See), and it doesn’t make sense for someone to lose privileges through some mistake of the forum admins as they advance in rank.


Sidebar links are created to PMs
(Jeff Atwood) #2

Sounds like this is just a permissions issue with the lounge.

Why wouldn’t lounge contain these permission groups?

  • trust_level_3 create/reply/see
  • trust_level_4 create/reply/see

Seems like a much easier fix, @neil


(Kane York) #3

In that case, could you also fix the howto category here?


(Sam Saffron) #4

Fixed via


(Sam Saffron) #5