1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.4 profile posts permissions question

Discussion in 'XenForo Questions and Support' started by Mr Lucky, Aug 17, 2015.

  1. Mr Lucky

    Mr Lucky Well-Known Member

    If a user does not have permissions to post or view profile posts, it seems those users who do have permission to view and post can post on that users profile.

    This makes no sense, is there a way to stop people posting on the profile of a user who cannot see or respond to those posts?

    Maybe I'm missing something very obvious.
     
  2. Amaury

    Amaury Well-Known Member

    That's as designed, I'd say.

    Other than revoking the Post new profile posts permission, you could change that user's privacy settings.
     
  3. Mr Lucky

    Mr Lucky Well-Known Member

    Why would it be designed like that?


    It's not a specific user, it's any usergroup that doens't have permission to view or write profile posts.

    Nothing stops usergroups with those permissions from writing on those profiles, which seems wrong if the person cannot see or respond what is written there.

    The person who writes something may not know the other person can't see or respond, and hence think them to be rude.
     
  4. Amaury

    Amaury Well-Known Member

    It makes perfect sense, if you think about it.

    • User Group A: Cannot view or make profile posts
    • User Group B: Can view or make profile posts

    So it makes sense that members of user group B can make profile posts on the profiles of members who belong to user group A.
     
  5. Mr Lucky

    Mr Lucky Well-Known Member

    Why?

    If I can't view posts on my profile, I wouldn't be happy that other people are making them there.

    Maybe you aren't understanding what my point is.

    Put it this way: would you like it if people are posting on your profile, asking you stuff or saying things about you, but you don't know about it?
     
  6. Brogan

    Brogan XenForo Moderator Staff Member

    How is that different to members posting about other members in forums they don't have access to?
     
    Amaury likes this.
  7. Chris D

    Chris D XenForo Developer Staff Member

    Just to confirm, this is working as expected. Those users who can't view profile posts may wish to change their privacy settings to prevent users from posting on their profile - as an admin you can also set this on their behalf in the Admin CP.

    Aside from these solutions, it is a valid suggestion so it may be worth posting it as one (if it doesn't exist already).
     
    Jeanette and Amaury like this.
  8. Mr Lucky

    Mr Lucky Well-Known Member

    Because that is not on the person's profile.
     
  9. Mr Lucky

    Mr Lucky Well-Known Member

    Thanks Chris, this is what I'm looking for.

    However, I just tried that, but people with permissions can still post on someone's profile who has not ticked the "post messages" box.


    Screen Shot 2015-08-18 at 08.14.46.png

    If I tick the box I cannot choose "nobody" as that option is not available. How should this work?
     
  10. Chris D

    Chris D XenForo Developer Staff Member

    Unticking the box is the same as Nobody.
     
  11. Mr Lucky

    Mr Lucky Well-Known Member

    That's what I thought, however it's still possible for those with permissions to post there.
     
  12. Chris D

    Chris D XenForo Developer Staff Member

    It's likely possible that members who have the bypass privacy permission can, but normal users shouldn't.
     
  13. Mr Lucky

    Mr Lucky Well-Known Member

    Aha, that would explain it, thanks for the helpful answers!

    BTW, is there a way to batch set all users to have that box unticked?
     
  14. Chris D

    Chris D XenForo Developer Staff Member

    Unfortunately not (actually it could be done directly in the database if necessary).

    It's possible to set it as the default for new registrations (Admin CP > Options > User Registration)
     
  15. Mr Lucky

    Mr Lucky Well-Known Member

    Is that complicated?
     
  16. Chris D

    Chris D XenForo Developer Staff Member

    It depends.

    If you want to set that for all users (this would effectively disable posting on profiles at all), then it's quite a simple query that sets the allow_post_profile column to "none" in the xf_user_privacy table.

    If you want to set it conditionally based on user group membership or other things then the query becomes much more complicated.
     
  17. Mr Lucky

    Mr Lucky Well-Known Member

    No, that's all I need. Can you tell me what the query would be? Thanks
     
  18. Chris D

    Chris D XenForo Developer Staff Member

    Code:
    UPDATE xf_user_privacy SET allow_post_profile = 'none'
    Please take a back up first.
     
    Mr Lucky likes this.
  19. Mr Lucky

    Mr Lucky Well-Known Member

    Many thanks Chris. This was extremely helpful.
     

Share This Page