Bad Boy Blog, an unofficial Diddy and Bad Boy fan blog

Bookmark and Share

phpBB 3 Permissions Guide

phpBB 3 Permissions Guide

Postby ~HG~ » August 7th 2009, 3:50 pm

Quick Questions and Answers

Question: Why can't anyone see my new forums?
Answer: By default, new forums have no permissions assigned. You have to assign forum permissions, or copy them from another forum before anyone can see them.

Question: I have full administrator permissions. Why can I not see my new forums?
Answer: Administrator permissions have nothing to do with forum permissions. You have to assign forum permissions for your yourself or your usergroup before you can see or post in a forum.

Question: I have added permissions to my new forums, but I still cannot see them. Why?
Answer: You also have to add permissions to your forums' parent categories.

Question: I have added a new category, with proper permissions, but I cannot see it. Why?
Answer: Categories will not show unless there are viewable forums under them.

Question: How can I allow my moderators to create sticky or announcement topics?
Answer: Sticky and announcement permissions are in forum permissions. Assigning a "Full Access" forum role will allow them to make stickies and announcements.

Question: I set a subforum to copy permissions from its parent forum, but when I changed the permissions for the parent, the subforum did not change. Why?
Answer: "Copy permissions" is an action, not a setting. When you select to copy permissions it copies the permissions when you click Submit. It will not copy any future changes unless you select to copy them again in "Manage forums" editor.

Question: I created a private forum with a special group that has permissions to see the forum. Now, even members of that group cannot see that forum. Why?
Answer: You probably set "Never" permissions for the Registered Users group. Since members of your special group are also members of Registered Users, that Never permission is overriding the Yes permission assigned by the new usergroup. You should be deleting the Registered Users group from that forum's forum permissions list, rather than assigning Never permissions.

Permissions Types

There are five types of permissions in phpBB 3:

Global user permissions
Global moderator permissions
Global administrator permissions
Forum user permissions
Forum moderator permissions

The three global permissions are ones which apply to every forum or are unrelated to forums altogether.

The two forum permissions are ones which apply to only one forum at a time.

Any of these five permission types may be assigned to individual users or to usergroups.

Global Permissions

Global User Permissions

Global user permissions are those permissions which apply to all forums, such as permissions to attach or download files or use a signature, or permissions which are unrelated to a forum, such as permissions relating to profiles, private messages, and e-mail.

Global user permissions can be assigned to users by clicking "Users' permissions" from your Administration Control Panel (ACP) Permissions tab, selecting a user, and then selecting "User permissions" from the Select-type dropdown.

Global user permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "User permissions" from the Select-type dropdown.

In either case, you will be allowed to select a stock User Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Global Moderator Permissions

Global moderator permissions are those permissions which apply to editing, deleting, or otherwise affecting other users' topics and posts, or to affect other users through reports, warnings, or bans. Permissions given here will apply to any forum the user or usergroup can see.

Global moderator permissions can be assigned to users by clicking "Users' permissions" from your ACP Permissions tab, selecting a user, and then selecting "Global moderator permissions" from the Select-type dropdown.

Global moderator permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "Global moderator permissions" from the Select-type dropdown.

Global moderator permissions can also be assigned to both users and usergroups by clicking "Global moderators" from your ACP Permissions tab. This option will display all of the users and usergroups who are currently assigned global moderator permissions. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Moderator Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Global Administrator Permissions

Global administrator permissions are those permissions which apply to maintaining your board through the Administration Control Panel. They include permissions for maintaining forums, users, and usergroups, maintaining and assigning permissions, changing board configuration settings, and other such board maintenance tasks.

Global administrator permissions can be assigned to users by clicking "Users' permissions" from your ACP Permissions tab, selecting a user, and then selecting "Global admin permissions" from the Select-type dropdown.

Global administrator permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "Global admin permissions" from the Select-type dropdown.

Global administrator permissions can also be assigned to both users and usergroups by clicking "Administrators" from your ACP Permissions tab. This option will display all of the users and usergroups who are currently assigned administrator permissions. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Admin Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Forum Permissions

Forum User Permissions

Forum user permissions are those which apply to creating and editing ones own posts in a particular forum.

Forum user permissions can be assigned to users by clicking "Users' forum permissions" from your ACP Permissions tab, selecting a user, selecting one or more forums from the list, and then selecting "Forum permissions" from the Select-type dropdown.

Forum user permissions can be assigned to usergroups by clicking "Groups' forum permissions" from your ACP Permissions tab, selecting a usergroup, selecting one or more forums from the list, and then selecting "Forum permissions" from the Select-type dropdown.

Forum user permissions can also be assigned to both users and usergroups by clicking "Forum permissions" from your ACP Permissions tab, and then selecting one or more forums from the list. This option will display all of the users and usergroups who are currently assigned forum user permissions for that forum. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Forum Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Forum Moderator Permissions

Forum moderator permissions are those which apply to editing, deleting, or otherwise affecting other users' topics and posts in one particular forum, or to affect other users through reports, warnings, or bans.

Forum moderator permissions can be assigned to users by clicking "Users' forum permissions" from your ACP Permissions tab, selecting a user, selecting one or more forums from the list, and then selecting "Moderator permissions" from the Select-type dropdown.

Forum moderator permissions can be assigned to usergroups by clicking "Groups' forum permissions" from your ACP Permissions tab, selecting a usergroup, selecting one or more forums from the list, and then selecting "Moderator permissions" from the Select-type dropdown.

Forum moderator permissions can also be assigned to both users and usergroups by clicking "Forum Moderators" from your ACP Permissions tab, and then selecting one or more forums from the list. This option will display the all of the users and usergroups who are currently assigned forum moderator permissions for that forum. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Moderator Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Permission Roles

There are four types of permission roles:

Admin Roles, used with global administrator permissions
User Roles, used with global user permissions
Moderator Roles, used with global moderator permissions and forum moderator permissions
Forum Roles, used with forum user permissions

Permission Roles can be maintained by clicking the corresponding link on the ACP Permissions tab. Roles provide a convenient permissions template to use when assigning permissions to either users or usergroups. A role's permissions settings can be viewed or edited by clicking the green-gear icon for that role.

Most standard roles use combination of "Yes" and "No", meaning that if one user is assigned two different roles from being a member of two different groups, for instance Limited Access and Regular Access, the Yeses will override the Nos and leave the user with Regular Access.

The exceptions are the ones with "Never" settings, such as the User Roles "No Avatar" and "No PMs" and the Forum Role "On Moderation Queue". These three roles use "Never" settings, and therefore override the "Yes" settings that would have been granted by other roles.

You should never use one of these three roles, or any other "Never" settings with your Registered Users group. Doing so will take those permissions away from everyone, including yourself.

If a role's permission settings are not quite right for your forum - for instance, you don't want anyone to be able to hide their online status - you can add or subtract a permission here. Then where ever that role is used, that permission will be changed.

You can also create your own custom roles by typing a new name into the "Create role" box, selecting a role to copy from in the "Use settings from" dropdown, and click Submit. Then you can customize your new role and use it for assigning those permissions.

Permission Masks

Permission masks is a tool for viewing the permission settings for all five permissions types for both users and usergroups.

Each link on the Permissions Masks section of the ACP Permissions tab corresponds to one of the five permission types:

View administrative permissions for global administrator permissions
View user-based permissions for global user permissions
View global moderation permissions for global moderator permissions
View forum moderation permissions for forum moderator permissions
View forum-based permissions for forum user permissions

Any of these five links will take you to a page listing the users and usergroups that are assigned those global or forum permissions.
Selecting one or more usergroups will display the permissions for those usergroups, much the same way they are shown in the permissions edit pages.

Viewing a user's permissions is much different.

If you type a user's name into the "Find a member" box for any of the five permission types and click "View permissions," it will display that user's resulting permissions, taking into account all of the user's groups' permissions. Also, the "forum moderation" mask will take into account global moderation permissions as well.

Each individual permission will have a circle-arrow which is a link to display all of that user's groups and which groups grant or deny that permission.

The other exception is "Founders". If a user is marked as a Founder on their User Administration Overview page, they will be granted All of the global administrator permissions, overriding any No or Never settings given to that user or his usergroups.

Other Shortcuts

The shortcuts on the ACP Permissions tab are sprinkled around other spots in the ACP.

The Users' permissions, Users' forum permissions, Groups' permissions, and Groups' forum permissions links are duplicated on the ACP User and Groups tabs.

The Forum permissions, Forum moderators, Users' forum permissions, and Groups' forum permissions links are duplicated on the ACP Forums tab.

On the Manage Users page, after selecting a User, you can select "Permissions" on the "Select from dropdown" and will see the following:

The three global permissions masks are shown by default
The "Select a forum" dropdown that will display the two forum permissions masks
Set users permissions link that leads to update the three global permissions
Set users forum permissions link that leads to update the two forum permissions

Permissions Quick Start

The following permissions can be set to help start a new forum.

Global Administrator Permissions

By default the Administrators usergroup has the Standard Admin role. This will prevent anyone but the Founder from assigning any other administrators, editing roles, and installing any language packs, styles or modules into your forum.

By default the Standard Admin role cannot use other's permissions. This makes maintaining permissions more difficult, so I would recommend editing the "Standard Admin" admin role and adding the permission "Can use others permissions".

Global Moderator Permissions

By default the Global Moderators usergroup has the Standard Moderator role. This allows them to moderate any forum they can see, but does not allow them to change a post's author or ban users.

Add the Standard Moderator or Full Moderator role to the Administrators usergroup. This will allow your Administrators to moderate any forum, without having to add them to the Global Moderators usergroup.

Global User Permissions

Administrators and Global Moderators usergroups start with All Features user role, which is fine.

Registered Users start with Standard Features user role, which gives them most normal user rights, but does not allow them to change their username or default usergroup and a few other things.

Standard Features user role allows users to hide their online status. You may want to edit this Standard Features role and set this permission to No.
Guests start with custom global user permissions that only allow downloading and searching.

Forum Moderator Permissions

Administrators and Global Moderators would have global ,oderator permissions, so it is unnecessary to assign them as forum moderators.

If you will have junior moderators who will moderate individual forums, add those users to those forums' moderator lists, or create moderator usergroups for those moderators and add the usergroups here. Assign the users or usergroups appropriate Moderator Roles.

Forum User Permissions

For most forums, give your Administrators and Global Moderators usergroups the Full Access forum role. This will allow them to make stickies and announcements.

Give your Registered Users usergroup the Standard Access forum role for any forums except your administrator/moderator-only forums or other hidden forums.

Give Read Only Access forum role to the Guests usergroup for forums you want unregistered guests to be able to read.

Add the Bot Access forum role for the Bots usergroup for the same forums you want guests to read, so webcrawler searchbots can index those forums.

The No Access forum role would be more useful with "Never" permissions than its current "Nos". Edit the No Access forum role and change "Can see forum" and "Can read forum" from "No" to "Never". This will allow you to use this role to block access to a forum for a small group.

With this knowledge in hand, you should be on your way to a better understanding of the phpBB 3 permissions system.
~HG~
Dedicated User
 
Posts: 3913
Joined: November 8th 2003, 8:54 pm
Location: Australia

Return to phpBB 3: Technical Reference

Who is online

Users browsing this forum: No registered users and 1 guest