Privileges refactor - Githubissues

NodeBB / NodeBB

Node.js based forum software built for the modern web

https://nodebb.org

GNU General Public License v3.0

14.23k stars 2.8k forks source link

Privileges refactor #5736

Open pitaj opened 7 years ago

pitaj commented 7 years ago

[x] Create a centralized privileges interface (by group / by user instead of by category)
[ ] Add deny privileges that override allow privileges
[ ] Split up moderation permissions
- [x] Global account info access
- [ ] Global user sessions access
- [ ] Edit history
- [ ] Editing other's posts
- [ ] Locking topics
- [x] View removed posts
- [ ] Deleting posts / topics
- [x] Banning
[x] Add global privileges
[ ] Change global moderators to a default group with by default global moderation permissions
[ ] ? switch to not using groups for storing permissions ?

This would cover #5569, some of #3914, and could cover #4652 and #5127 as well.

ELadner commented 7 years ago

Could it be possible with this scheme to create a category where users can't see other users topics but can create a topic and always view their own topic?

Like a support forum where users may have sensitive issues. Other users don't need to see the topic, but the user that creates it can interact with the support team that can read the whole category.

julianlam commented 7 years ago

No, that is too obscure a use case to condition for, I think. Traditionally we've opted to do this via third party plugins.

nodebb-plugin-support-forum being the one you're looking for.

dangerusslee commented 7 years ago

I would be interested in the ability to give groups certain admin privileges - like managing categories for instance.

elaine-jackson commented 7 years ago

I would like to be able to set global mods to have soft delete only and never purge. It avoids a lot of issues in the event of a mods account getting hacked (restoring backups suck!).

aStonedPenguin commented 7 years ago

@julianlam No notable forum software doesn't allow you to give groups fine tuned permissions. Shortsighted decisions like that seriously hold NodeBB back from widespread use.

julianlam commented 6 years ago

For what it's worth, a number of these changes have been implemented, with global privileges and purge now being a separate privilege no longer bundled with moderation.

gaellelo commented 5 years ago

@julianlam does it mean that global moderators shouldn't be able to purge anymore? If so how, cause with our setup, if they have moderation rights they can still purge for example.

julianlam commented 5 years ago

No, global moderators should still be able to purge.

Fudster commented 1 year ago

Bump? Would be nice to break these permissions down more because I want my mods to be able to delete posts but not edit