Boardirectory / Board-Directory

Board Directory Source
http://boardirectory.org
1 stars 0 forks source link

BD staff submitting boards too #19

Closed maxpen closed 11 years ago

maxpen commented 11 years ago

It should be possible for staff of BD called Indexers in a distant future to submit boards at will through the form a user would do it.

The BIS will be able to know we maintain it by us selecting at a option:

Are you BD Staff? We select YES.

The BIS checks for the permissions that you are indeed a staff member. By checking your group ID for it to match either admin, mod or indexer usergroup.

If not it shows an error for the user submitting it that maybe on accident selected yes for that value.

And if a staff with boards goes quitting the BIS will notice the change of usergroup. Withing 24 it will tell us that it moved the boards associated with that user to a dummy admin account.

ghost commented 11 years ago

We can pile all those boards on 1 fake admin account and then use the group feature so mods can maintain it.

maxpen commented 11 years ago

Yeah, that is a good idea but if that 1 admin account gets hacked it makes it possible for the hacker to have access to all these boards at once.

While with my idea its spread out. And if a staff with boards goes quitting the BIS will notice the change of usergroup. Withing 24 it will tell us that it moved the boards associated with that user to a dummy admin account.

ghost commented 11 years ago

We can make it so the account has no password and thus cannot be logged in as.

maxpen commented 11 years ago

Okay. XD

ghost commented 11 years ago

This is a duplicate of issue #7.