Group membership moderators 2.2.1

[Mr. Jinx]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.1a] New feature + bugfixes

• New feature: It is now possible to assign a group of members as 'group moderators'
• Bugfix: Creating a new group and adding a group moderator at the same time would result in an error.
• Bugfix: Better cleanup when removing a group with group moderators assigned. This would result in some problems.

View attachment 200643

Warning: Always make a backup and test before installing this on a production forum.

Read the rest of this update entry...

 

[Mr. Jinx]

Get 50% discount on this add-on:
Couponcode = HAPPYEASTER2019
Valid from 20 to 22 April 2019
---​

 

[Mr. Jinx]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.1b] Added logging

• Actions are now also logged to the moderator log

Note: This will only work if the user is a moderator (this is by Xenforo design). If you also want to log actions from non-moderators you will need this extra add-on: Log all moderator actions

Read the rest of this update entry...

 

[Vanjoe]

I have not heard of this problem before, so probably some incompatibility between this addon and 'Colored Username Everywhere'.

I disabled that addon, and I'm still having the same issue. Banners are applied, username CSS is not. Username CSS works if I manually add the user to the group through the admin panel.

 

[Mr. Jinx]

Thanks for the extra info @Vanjoe, indeed there is a difference.
I'll have a look.

 

[Kintaro]

if a group has two group moderators one mod can exclude the other mod from it?

 

[Mr. Jinx]

That is up to you, you can make it as complex as you like.

Example 1:

In this example, all members from the group 'Group moderators' can add/remove users from the group 'Test'.
Group mods can remove them self (or other mods) as a member from the 'Test' group, but they will keep the groupmod role.

Example 2:

If you would add 'Group moderators' the right to manage it's own group, then the group moderators can add/remove others as groupmod. So this might be a bit dangerous

 

[Mr. Jinx]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.2] Maintenance release

• Bugfix: some group properties where not added correctly (thanks @Vanjoe for the report)
• Improved add/remove user group function
• Actions are now also logged in user change log

Read the rest of this update entry...

 

[Chipie678]

if you change ID from url you can access to another group whitelist
I remove this addon fast from my forum and get money back

 

[Mr. Jinx]

Thanks for the report @Chipie678 , working on it. And money back is no problem.
Although I really would have appreciated it even more if you would have first contacted me personally about this.

In the mean time, I suggest anyone who has concerns to temporarily disable the add-on until a fix is provided.

 

[Mr. Jinx]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.3] Important Security Update

!!! IMPORTANT SECURITY UPDATE !!!

This update fixes a security issue discovered today. An unauthorized user could manage groups by using direct URL's used by this add-on. Normally a user won't know these URL's, but this could potentially be abused.

Warning: This is a hotfix which fixes the security issue immediately, but it has another known issue. If you do not or can not install this hotfix right now then you are advised to DISABLE the add-on until the final fix is ready...

Read the rest of this update entry...

 

[Stefhan]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.3] Important Security Update



Read the rest of this update entry...

Thank you for resolving this security issue so quickly! Highly recommending this addon to anyone that's considering it.

I really hope for a feature that makes it possible to "catagorize" usergroups. So lets say you have administrators and VIP's:

The way Xenforo currently works is that you can either show all usergroups or show one usergroup. So if someone is lead administrator, they probably also have junior administrator etc as usergroup. But if they're also VIP, and there's different VIP ranks (e.g bronze, silver, gold) and they're gold, then you either have to show all those usergroups or just 1. Admin would obviously be above VIP in this case, so nobody would see that a player is VIP as well.

I'm hoping that you can make it possible to catagorize usergroups so group 1 is administrative, group 2 is VIP, group 3 is for this faction, etc. And then you can display 3 UGs instead of dozens if the rank structure is set up that way.

Visualization incase I haven't explained it properly:

Lead Admin
General Admin
Junior Admin
Gold Vip
Silver Vip
Bronze Vip

Becomes:
Lead Admin
Gold Vip

two seperate categories for display ^^

 

[Chipie678]

Thanks for the report @Chipie678 , working on it. And money back is no problem.
Although I really would have appreciated it even more if you would have first contacted me personally about this.

In the mean time, I suggest anyone who has concerns to temporarily disable the add-on until a fix is provided.

Hello ,

I would already like to apologize for reacting so it is a very useful function and I need on my forum
After discovering this and a bit angry at having bought an addon with such a big loophole and I directly created a paypal dispute

I will probably bought the addon because this one is interesting

Thank you for solving this problem quickly


Arnaud

 

[JacquiiDesigns]

Wow. What a great piece of functionality @Mr. Jinx
Thanks so kindly for the share. Cheers.

J.

 

[JacquiiDesigns]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.3] Important Security Update
Read the rest of this update entry...

Thanks for getting on the fix. I hope it's released sooner rather than later.
Speaking of which ... I'm confused. I tried to download in order to test the add-on and there seems to be a download loop issue with no download. I'm also confused, as I don't see a price listed, but I see that there was a 'sale' of it back in April. Is the add-on a paid-on or free? And perhaps with the recent security issue discovery being fixed - is it why there's no download available?

Apologies for stupid questions ==> But inquiring mind wants to know LOL.

I would very much be interested in this - especially when the security issue if fixed.
Thanks,

J.

 

[Mr. Jinx]

I really hope for a feature that makes it possible to "catagorize" usergroups. So lets say you have administrators and VIP's:

Thanks for your suggestions Stefhan. At this point I don't think there will be any new features soon but when there is time, who knows. I'll put it on the wish list anyway.

After discovering this and a bit angry at having bought an addon with such a big loophole and I directly created a paypal dispute

No problem Chipie678, I might have reacted the same in your situation. We are still very glad that you reported this nasty bug.
A little background: Ofcourse security is build in to prevent unauthorized users to access those URL's. However the function that handles the permissions contained a very small error with very big impact. By fixing this bug, we discovered another issue. This issue in non-security related but is still being worked on. @NixFifty was so kind to help me with this.

And perhaps with the recent security issue discovery being fixed - is it why there's no download available?

Exactly. Although the security issue has been fixed, we discovered another issue which is not security related. Once this is fixed and everything has been tested the add-on can be purchased again. It is a paid add-on.

 

[Mr. Jinx]

Mr. Jinx updated Group Membership Moderators with a new update entry:

[2.1.4] Important update

• Fixed problems with "Group based" moderators after security hotfix
• Minor code cleanup

Read the rest of this update entry...

 

[Mr. Jinx]

Mr. Jinx updated Group membership moderators with a new update entry:

Free for all

This add-on can now be downloaded and used for free. No branding! Have fun ...

Read the rest of this update entry...

 

[NicolasZN]

Very cool that this is now free for all - I'd been considering this add-on for a little bit but wasn't sure it'd be necessary enough for my community to justify the purchase.
A couple questions:
1) Is there a way to tip you for your add-ons?
2) Does the free for all designation make future maintenance updates less likely?

 

[Mr. Jinx]

All the add-on's I have published over here are in use on my own site. As long as I use them, they should be maintained
If for some reason I can't maintain this, then I will try to hand it over to someone else who can.
Good idea about tipping, I added a donation button!