HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


User access control driving me nuts

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#74582 (In Topic #15524)
Avatar

Fan in training

New to OCPortal, and having a lot of issues.
OCPortal seemed like a really good choice for what I needed, a subscription membership based website where you can purchase different packages/memberships depending on what you want access to.

But for some reason the whole access control thing is driving me insane.
I can't figure out how modify the Newbie usergroup to have pretty much no access at all until the user purchases some form of membership.
The user can get access to a lot of information they shouldn't have such as memberlists, usergroups, etc. and don't seem to be able to figure out how to set up the menus so that they only appear if you're an admin/super moderator.
No other user should have access to anything other then their own account information, a forum (Also limited depending on their memberships) and pages and files I specify.

The tutorials are good, but seem to be lacking alot of the info I need, or I just can't find the right ones. :/

For some reason the admin interface seems very powerful yet clunky, but I can't explain why.

I have experience working with CMS setup, integration, and modifications in the past and I do web design so I'm not new to the game.

Any advice would be useful at this point.
Back to the top
 
Posted
Rating:
#74585
Avatar

Community saint

  • …for some reason the whole access control thing is driving me insane.
          HAH! you aren't the first.
  • I can't figure out how modify the Newbie usergroup to have pretty much no access at all until the user purchases some form of membership.
          Take away their 'View' access for any part(s) of the site you don't wish them to see or interact with.

I assume you've waded through:

Global Privileges
(Home Admin Zone Security Privileges)

and

Permissions Tree Editor
(Home Admin Zone Security Permissions Tree Editor)

If you haven't, you will need to. If you have, then there isn't a magic bullet to 'fix the Newbie' in one go. You'll need to go through each of the permissions to stop your Nasty-Newbie's from seeing and interacting with anything you don't want 'em to.

Good luck!

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#74599
Avatar

The tutorials are good, but seem to be lacking alot of the info I need, or I just can't find the right ones.  :/

We need people like you to help document solutions to your real-life scenarios in the community documentation.

For some reason the admin interface seems very powerful yet clunky, but I can't explain why.

If you haven't already, removing some of the bundled addons you don't need will cause it to simplify down a lot. We recommend this.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#76372
Avatar

Fan in action

Hope this doesn't sound foolish (I've posted a couple of those so far)…

I'm looking to restrict casual visitors from viewing much of the content of the site - just a person who comes across the site and wants to browse around.

The goal is to hide the members and access to their profiles, among other things. However, it seems that I am only able to set permissions within the listed User Groups.

I did mess around with the user groups themselves - so might have shot myself in the foot.

Any help would be appreciated.

"Be true to yourself. Be who you are in your heart. Don't hang out with idiots. If you surround yourself with good people, you'll go far. If you start hanging out with knuckleheads, you'll be right in the knucklehead section the rest of your life." — Kid Rock
Back to the top
 
Posted
Rating:
#76375
Avatar

Community saint

If I remember correctly, you need to disable Guest access to "Module: contact member", "Module: online members", "Module:points", "Module: groups" and "Module: members" in the Welcome zone.

Hope I got then all.

Bob
Back to the top
 
Posted
Rating:
#76393
Avatar

Fan in action

Hi Bob,
Thanks for the response. I've went into the Permissions Tree and made changes to the "view access" for the two lower usergroups.

Opening the site in a new browser, I can still see the membership list - just not their particular group names (unknown) - and can still send an email when I click on a member's name.

Is there permissions settings/tree or 'group' for users who are not logged in (potential members initially browsing)?

"Be true to yourself. Be who you are in your heart. Don't hang out with idiots. If you surround yourself with good people, you'll go far. If you start hanging out with knuckleheads, you'll be right in the knucklehead section the rest of your life." — Kid Rock
Back to the top
 
Posted
Rating:
#76406
Avatar

Community saint

The Guest group is for non-logged users. Try unchecking that as well. Make sure you clear your browser cache too as you might otherwise be viewing a cached page.

Bob
Back to the top
 
Posted
Rating:
#76407
Avatar

As I noted in my email, you renamed the Guests group ;). You can still tell which it is because on the "Admin Zone>Security>Usergroups" screen it is the one that is not clickable (but the edit links still shows and is clickable). If you look at the edit URL you'll see the ID is '1'.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: