1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

As Designed Secondary User Groups

Discussion in 'Resolved Bug Reports' started by Sleepwalker, Oct 20, 2010.

  1. Sleepwalker

    Sleepwalker Member

    If you have set your "User Group" to "Administrative" and then set "Secondary User Groups" to a usergroup with less access you will loose some access.

    You will still have the "User Title Override" connected to the "Administrative" access.
     
  2. Mike

    Mike XenForo Developer Staff Member

    If you're doing things that involve "revoking" access, then that's expected. You must explicitly allow to override a revoke. (If you're using deny, then this cannot be overridden with an allow; deny should be used sparingly, usually to specifically remove things from problematic users.)

    User groups do not confer anything automatically. Everything must be laid out explicitly.
     
  3. Sleepwalker

    Sleepwalker Member

    Yea but shouldn't the "Primary" group access be the real (primary) access?
     
  4. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

  5. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

    I haven't been able to identify any functional difference between primary and secondary groups in my testing. From what I can tell it's strictly a matter of organization which is what I would expect. Multiple group memberships allow for more flexible permission assignments.
     
  6. Shaun Mason

    Shaun Mason Active Member

    Why would you do that?
     
  7. Sleepwalker

    Sleepwalker Member

    Couldn't "Display Styling Priority" be renamed and be used to set the priority of the groups as well?
     
  8. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

    Priority for what? Permissions?
     
  9. Sleepwalker

    Sleepwalker Member

  10. Mike

    Mike XenForo Developer Staff Member

    If you want permission priority, why even use multiple user groups? The system is designed to allow you to create "roles" effectively, using a combination of simpler units. It sounds like your configuration doesn't want to use secondary groups.

    Permission priority doesn't make sense. There is already a defined priority within them. Titles don't have that intrinsically.
     
  11. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

    Hmm, I don't like that idea. :D

    The current system seems perfectly functional. I can't think of a use case which would require or necessarily benefit from permission priorities.

    Is there something specific you are trying to accomplish? I might be able to suggest how you can organize your groups.
     
  12. Sleepwalker

    Sleepwalker Member

    The thing is that if one group has access to a forum that the secondary don't and the other way around.
    Then you would need to create a 3:rd group that has access to both groups instead of checking both groups for access with the group with highest access / priority first.
     
  13. Jake Bunce

    Jake Bunce XenForo Moderator Staff Member

    xenForo's node permissions don't quite work that way. Rather than specifying disallowed groups you need to specify allowed groups. This approach is actually better once you get used to it.

    http://xenforo.com/community/threads/1-0-0-b1-understanding-permissions.5830/

     
    feldon30 likes this.

Share This Page