Permissions Issue

[Lum]

Ugh, permissions is going to be my bane...

I'm setting up a new forum for a game that offers as a Kickstarter tier access to special developer feedback forums. We've set them up using Xenforo. Specifically, the producers want everyone to be able to see the forums themselves and the topic list, but not to be able to read or post the actual topics. So just ticking the Private flag isn't enough for this use case. No problem, right? Xenforo has seperate flags for "view threads by others" and "view thread content". Unfortunately it doesn't work.

My group setup:

Registered (default, primary group id)
Developer+ (people with access to these forums, are also members of Registered)

My problem is that if I can't block Registered from these forums at all - if I set ANY negative perms for the Registered group, revoke as well as never, it blocks everyone in the Developer+ group subset as well, even if they are set to explicitly allow.

At this point I'm willing to just make them private forums for now but that doesn't work either.

Help?

 

[Jeremy]

Set the "View Thread Content" to Revoke for Registered and Allow on Developer+.

 

[Paul B]

It sounds like you are using Never.

Read this: http://xenforo.com/community/resources/implementing-permissions-across-multiple-user-groups.358/

 

[Lum]

It sounds like you are using Never.

Nope.

Set the "View Thread Content" to Revoke for Registered and Allow on Developer+.

Tried that. Here's screens.

 

[Jeremy]

Do you have any other user groups?

 

[Lum]

Do you have any other user groups?

Yes but none have perms set for that forum.

 

[Jeremy]

Is never set for any of those within the actual user group permissions?

 

[Lum]

Nope. Unregistered just has revoke set for view node.

 

[Paul B]

Have you set View Node to allow for any of the groups?

 

[Lum]

Yes, and they can all view node, just not the thread content (which is expected behavior for people NOT in the group given access).

Switching the flag on the Registered group from Revoke to Allow gives everyone thread reading access (both Registered and Developer), activating it takes away thread reading access in both Registered and Developer groups.

 

[Jeremy]

You haven't set "View Threads by Others" to Revoke or Never anywhere, have you?

Also, note, that using "tesT Permissions" applies the permissions to your permissions set, so if you are revoked from something, that will show it being revoked as well.

 

[Lum]

Nope. I've literally set everything to inherit for every group while trying to get this to work.

 

[Jeremy]

What user group is "Aartemis" in? And what user groups are you in?

 

[Lum]

 

[Paul B]

I can take a look if you can give me an admin log in and also a log in of an account which should have access.

It won't be until later though as real life duties are calling.

 

[Jeremy]

What groups are you in (I'm assuming that's the persons permissions you are testing, correct?). Also, you may want to give this a read:
http://xenforo.com/community/resources/understanding-permissions.360/

I can also jump in and look if you'd like to trust me with access.

 

[Lum]

I can also jump in and look if you'd like to trust me with access.

I'll go ahead and make you an account, PM me. Thanks!

 

[Jeremy]

Looking into this it seems like "Test Permissions" is applying some odd conversations (but the default permissions system) functions correctly...

 

[Lum]

Yes, making actual test users with the right permission set seemed to do the trick for testing. Thanks!

 

[Paul B]

Ah, so it was the test permissions feature and not actual end user permissions?

Don't forget how test permissions works: http://xenforo.com/help/permissions/