HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Primary / Secondary Group Permissions

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#38081 (In Topic #8560)
Avatar

Community saint

Maybe I am just not understanding the concept / function of this. My problem is that I run a site for an organization that has different titles in the organization. So what I did was create a group for each of the organization's titles, then when one of the members register on the site I assign them to their correct group. That way the show up on the site with the correct title and I can also assign them with a Rank image.

The problem I have is that a few of them need to be site staff members and moderators. So I thought that I could just add them as secondary members of the Super Moderator group. Well they still have the correct title and rank image, if someone clicks the staff menu they show up as Staff members but they don't have any of the supper moderator rights.

If I make them a Primary member of the Super Moderator group they have the correct rights but not the correct title or rank image. I tried adding them as secondary group members of the group with the correct title and image but then they loose the moderator rights.

Am I misunderstanding the secondary group function? I thought that being a secondary group member adds those rights to that member but it doesn't? It seems to take the lowest denominator so if a person has a primary with high rights like a moderator but are then added to a secondary group with lower rights the lower rights are assigned. I don't see the use of the secondary group function at all. Thanks

Rick Henson

OCP 4.3.2 & 5.0.1
PHP 5.2.5
MySQL 5.0.51a
FireFox 3.6.8
Back to the top
 
Posted
Rating:
#38086
Avatar

Community saint

Please, tell us the version you run, and url of your site.

Secondary group add right to right you have in the primary group.
You do it well, so if dosen't work maybe you wrong something…

But first, tell us OcPortal version number and url of your site!
Back to the top
 
Posted
Rating:
#38087
Avatar

Community saint

I have the latest version 3.2.7 As to the URL it is a closed private site so you would not be ale to gain access but it is www.core4system.com/training 

Rick Henson

OCP 4.3.2 & 5.0.1
PHP 5.2.5
MySQL 5.0.51a
FireFox 3.6.8
Back to the top
 
Posted
Rating:
#38090
Avatar

Hi,

This should work as you had expected.

I can look into the problem for you, but I'll need access to your site to check your setup. Please set up a member to be a secondary-group supermoderator and a primary staff (as you desire), and then let us know (in a new ticket):
  • the username you've done this for
  • what they should have permission to do but apparently do not
  • admin login details for your site


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#38102
Avatar

Hi Rick,

Thanks for your ticket.

To clear this up, I'll post the explanation publicly.

What we have here is an intentional but complex situation with permissions.
The way specific permission overriding works (which is what you're doing when you're setting permissions on forums), is that the override takes precedence. In your case, the primary group the user was in had an overridden "deny" permission, and the permissions for the secondary group (super moderators) was not overridden. Hence the "deny" took precedence, even though super moderators have a global "grant" permission.
The solution here is to give full overridden "grant" permissions to your super moderator group wherever you choose to override permissions in other groups to "deny".

So in summary…
Permissions are "best of", except overridden permissions take precedence to global permissions.

It does seem a bit weird, but the way it works gives you more control. It allows you to say anyone in a group should be denied even if they are in other groups. For example, you could put someone in a 'Youth moderator' group and deny them access to adult forums – so even youth moderators who were also super moderator would be restricted, yet other super moderators would not be.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#38104
Avatar

Community saint

Gosh, now I feel stupid, I am still trying to figure out this whole permissions thing and screw everything up. Sorry for wasting your time Chris and thanks once again for your help.

Rick Henson

OCP 4.3.2 & 5.0.1
PHP 5.2.5
MySQL 5.0.51a
FireFox 3.6.8
Back to the top
 
Posted
Rating:
#38106
Avatar

Quite the opposite. I was confused too ;).


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
There are too many online users to list.
Control functions:

Quick reply   Contract

Your name:
Your message: