[MMO] Security Permission 2.2.0

[kick]

kick submitted a new resource:

[MMO] Security Permission - Adds new rights for security

The add-on adds new rights to the account security page. New permission:

• Can change password
• Can change email
• Can disable tfa email
• Can disable tfa totp
• Can disable tfa authy

Read more about this resource...

 

[arn]

would it be easy to add "Can use Authy" as a permission? I'd like to offer it only to admins/mods

 

[kick]

I'll see it

 

[Spanner_Man]

Does this work with the current version of Xenforo (2.2.7)?
I find the option to have Authy for admins/mods to be very handy considering Authy have changed their pricing

 

[kick]

Does this work with the current version of Xenforo (2.2.7)?

Works

 

[Spanner_Man]

Cheers.

I added it and it seems the permissions are to only stop someone from disabling, not for preventing a user/group to use a particular provider.

I want Authy for admins & mods, not for members and everyone else.

I have no issue with those using standard 2FA but Authy changed their pricing and I would rather only admin/mod have Authy

 

[kick]

it works like that, everything is configured in the rights

 

[Spanner_Man]

I have a test user created, with group perms set as following


And yet on the logged in test user;


Same applies when I have "can disable tfa authy" set to never. Authy is still an option to enable for the end user when "supposedly" its disabled in perms/rights.

 

[kick]

My mistake, this add-on prohibits the shutdown of the provider. I will add the rights to use a specific right. Today during the day I will add the right to use and release the release

 

[kick]

kick updated [MMO] Security Permission with a new update entry:

2.2.0

Add new permission group
Add new permissions:

• can enable tfa email
• can enable tfa totp
• can enable tfa authy

Read the rest of this update entry...

 

[Spanner_Man]

Great work @kick exactly what was needed.

Also I set the perm to never for "can enable tfa via email" for all user groups - such an insecure tfa method if I've ever seeon one for forum software like xenforo to even have.