HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Can you hide User Groups?

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#22196 (In Topic #5361)
Avatar

Fan in training

I tried searching these forums and using google to search this site on this topic but found nothing useful.  Ok, the way I used User Groups in IPB was to hide various sub forums from people who didn't have permission to view them.  Well I can do that in the ocPortal forum but the Groups are visible for all members to see…  I don't want people to see what groups exist and I definitely don't want anyone to see what users are in what groups.  Is there an easy way to hide the Groups or particular groups from users so they can't see them ever? 

Even beyond people seeing those groups I don't think anyone should ever be able to see the Administrators group and what Administrators are inside of it.  Admins should be for site configuration and various behind the scenes work, and should never be posted from.  This exposes your highest level account to possible hackers or anyone else wanting to perform malicious actions on the forum.  High level "admins" should be broken out into super-mod groups that protect certain forum features via permissions.  That's just my opinion though but I would like to hide the Administrators group as well as the others to help secure my site.
Back to the top
 
Posted
Rating:
#22206
Avatar

I agree with you so we'll consider implementing this for a future release.

In the mean-time, you can filter stuff out using template editing. For instance, edit OCF_GROUP_DIRECTORY_ROW:

Code

{+START,IF,{$AND,{$NEQ,{NAME},Administrators},{$NEQ,{NAME},Super Moderators}}}}
<tr>
   <td>
      <a href="{URL*}">{NAME*}</a>
   </td>
   <td>
      {NUM_MEMBERS*}
   </td>
</tr>
{+END}

OCF_GROUP_DIRECTORY_PAGE:

Code

{TITLE}

{+START,IF,{$OR,{$IS_STAFF},{$AND,{$NEQ,{NAME},Administrators},{$NEQ,{NAME},Super Moderators}}}}}
<table summary="{!COLUMNED_TABLE}" class="columned_table wide_table">
   <tr>
      <th>
         {!NAME}
      </th>
      <th>
         {!COUNT_MEMBERS}
      </th>
   </tr>
   {ROWS}
</table>
{+END}
{+START,IF,{$NOT,{$OR,{$IS_STAFF},{$AND,{$NEQ,{NAME},Administrators},{$NEQ,{NAME},Super Moderators}}}}}}
Access denied
{+END}

(this is all untested - just trying to quickly spread some knowledge :))


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#22208
Avatar

Fan in training

Awesome, thanks.
Back to the top
 
Posted
Rating:
#22272
Avatar

Community saint

brentil said

…I don't want people to see what groups exist and I definitely don't want anyone to see what users are in what groups.  Is there an easy way to hide the Groups or particular groups from users so they can't see them ever? 

…I don't think anyone should ever be able to see the Administrators group and what Administrators are inside of it.  Admins should be for site configuration and various behind the scenes work, and should never be posted from.  This exposes your highest level account to possible hackers or anyone else wanting to perform malicious actions on the forum.  High level "admins" should be broken out into super-mod groups that protect certain forum features via permissions.  …but I would like to hide the Administrators group as well as the others to help secure my site.
  :thumbs: Great suggestions and thoughts as we also dislike the fact you can see all groups when a member is selecting from the list of groups to join. There are system groups as suggested by you or staff groups and then the rest.

Some of the rest could also be highly classified and secure groups in an organisation. Often an org would have secured some sub forums that they want hidden from view and only certain members in that forum allowed by invitation from a closed executive.

Great to see the site director likes that one!;)

Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: