phpBB 3 permisisons

08 Sep 2010

Support Center » Knowledgebase » phpBB 3 permisisons

	phpBB 3 permisisons

Solution Permissions Types

There are Five types of Permissions in phpBB3:
Global User permissions
Global Moderator permissions
Global Administrator permissions
Forum User permissions
Forum Moderator permissions
The three Global permissions are ones which apply to every forum or are unrelated to forums altogether.
The two Forum permissions are ones which apply to only one forum at a time.
Any of these five permission types may be assigned to individual users or to usergroups.

Global Permissions

Global User Permissions

Global User permissions are those permissions which apply to all forums, such as permissions to attach or download files or use a signature, or permissions which are unrelated to a forum, such as permissions relating to profiles, private messages, and email.

Global User permissions can be assigned to users by clicking "Users' permissions" from your ACP Permissions tab, selecting a user, and then selecting "User permissions" from the Select-type dropdown.

Global User permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "User permissions" from the Select-type dropdown.

In either case, you will be allowed to select a stock User Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Global Moderator Permissions

Global Moderator permissions are those permissions which apply to editing, deleting, or otherwise affecting other users' topics and posts, or to affect other users through reports, warnings, or bans. Permissions given here will apply to any forum the user or usergroup can see.

Global Moderator permissions can be assigned to users by clicking "Users' permissions" from your ACP Permissions tab, selecting a user, and then selecting "Global moderator permissions" from the Select-type dropdown.

Global Moderator permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "Global moderator permissions" from the Select-type dropdown.

Global Moderator permissions can also be assigned to both users and usergroups by clicking "Global Moderators" from your ACP Permissions tab. This option will display the all of the users and usergroups who are currently assigned Global Moderator permissions. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Moderator Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Global Administrator Permissions

Global Administrator permissions are those permissions which apply to maintaining your board through the Administration Control Panel. They include permissions for maintaining forums, users, and usergroups, maintaining and assigning permissions, changing board configuration settings, and other such board maintenance tasks.

Global Administrator permissions can be assigned to users by clicking "Users' permissions" from your ACP Permissions tab, selecting a user, and then selecting "Global admin permissions" from the Select-type dropdown.

Global Administrator permissions can be assigned to usergroups by clicking "Groups' permissions" from your ACP Permissions tab, selecting a usergroup, and then selecting "Global admin permissions" from the Select-type dropdown.

Global Administrator permissions can also be assigned to both users and usergroups by clicking "Administrators" from your ACP Permissions tab. This option will display the all of the users and usergroups who are currently assigned Administrator permissions. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Admin Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Forum Permissions

Forum User Permissions

Forum User permissions are those which apply to creating and editing ones own posts in a particular forum.

Forum User permissions can be assigned to users by clicking "Users' forum permissions" from your ACP Permissions tab, selecting a user, selecting one or more forums from the list, and then selecting "Forum permissions" from the Select-type dropdown.

Forum User permissions can be assigned to usergroups by clicking "Groups' forum permissions" from your ACP Permissions tab, selecting a usergroup, selecting one or more forums from the list, and then selecting "Forum permissions" from the Select-type dropdown.

Forum User permissions can also be assigned to both users and usergroups by clicking "Forum permissions" from your ACP Permissions tab, and then selecting one or more forums from the list. This option will display the all of the users and usergroups who are currently assigned Forum User permissions for that forum. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Forum Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Forum Moderator Permissions

Forum Moderator permissions are those which apply to editing, deleting, or otherwise affecting other users' topics and posts in one particular forum, or to affect other users through reports, warnings, or bans.

Forum Moderator permissions can be assigned to users by clicking "Users' forum permissions" from your ACP Permissions tab, selecting a user, selecting one or more forums from the list, and then selecting "Moderator permissions" from the Select-type dropdown.

Forum Moderator permissions can be assigned to usergroups by clicking "Groups' forum permissions" from your ACP Permissions tab, selecting a usergroup, selecting one or more forums from the list, and then selecting "Moderator permissions" from the Select-type dropdown.

Forum Moderator permissions can also be assigned to both users and usergroups by clicking "Forum Moderators" from your ACP Permissions tab, and then selecting one or more forums from the list. This option will display the all of the users and usergroups who are currently assigned Forum Moderator permissions for that forum. You can add, edit, or delete users and usergroups from this option.

In either case, you will be allowed to select a stock Moderator Role in the role dropdown, or you can click Advanced Permissions to customize the permissions.

Permission Roles

There are four types of Permission Roles:
Admin Roles, used with Global Administrator permissions
User Roles, used with Global User permissions
Moderator Roles, used with Global Moderator permissions and Forum Moderator permissions
Forum Roles, used with Forum User permissions
Permission Roles can be maintained by clicking the cooresponding link on the ACP Permissions tab. Roles provide a convenient permissions template to use when assigning permissions to either users or usergroups. A Role's permissions settings can be viewed or edited by clicking the green-gear for that role.

Most standard Roles use combinations of "Yes" and "No", meaning that if one user is assigned two different roles from being a member of two different groups, for instance Limited Access and Regular Access, the Yeses will override the Nos and leave the user with Regular Access.

The Exceptions are the ones with "Never" settings, such as the User Roles "No Avatar" and "No PMs" and the Forum Role "On Moderation Queue". These three Roles use "Never" settings, and therefore override the "Yes" settings that would have been granted by other roles.

You should never use one of these three roles, or any other "Never" settings with your Registered Users group. Doing so will take those permissions away from everyone, including yourself.

If a Role's permission settings are not quite right for your forum -- for instance, you don't want anyone to be able to hide their online status -- you can add or subtract a permission here. Then where ever that role is used, that permission will be changed.

You can also create your own custom roles by typing a new name into the "Create role" box, selecting a role to copy from in the "Use settings from" dropdown, and click submit. Then you can customize your new role and use it for assigning those permissions.

Permission Masks

Permission masks is a tool for viewing the permission settings for all five permissions types for both users and usergroups.

Each link on the Permissions Masks section of the ACP Permissions tab cooresponds to one of the five permission types:
View administrative permissions for Global Administrator permissions
View user-based permissions for Global User permissions
View global moderation permissions for Global Moderator permissions
View forum moderation permissions for Forum Moderator permissions
View forum-based permissions for Forum User permissions
Any of these five links will take you to a page listing the users and usergroups that are assigned those Global or Forum permissions.
Selecting one or more usergroups will display the permissions for those usergroups, much the same way they are shown in the permissions edit pages.

Viewing a user's permissions is much different.

If you type a user's name into the "Find a member" box for any of the five permission types and click "View permissions" it will display that user's resulting permissions, taking into account all of the user's groups' permissions. Also, the "forum moderation" mask will take into account global moderation permissions as well.

Each individual permission will have a circle-arrow which is a link to display all of that user's groups and which groups grant or deny that permission.

Other Shortcuts

The shortcuts on the ACP Permissions tab are sprinkled around other spots in the ACP.
The Users' permissions, Users' forum permissions, Groups' permissions, and Groups' forum permissions links are duplicated on the ACP User & Groups tab
The Forum permissions, Forum moderators, Users' forum permissions, and Groups' forum permissions links are duplicated on the ACP Forums tab
On the Manage Users page, after selecting a User, you can select "Permissions" on the "Select from dropdown":
The three Global permissions Masks are shown by default
The "Select a forum" dropdown will display the two Forum permissions masks
Set users permissions link leads to update the three Global Permissions
Set users forum permissions link leads to update the two Forum Permissions

Permissions Quick Start

The following permissions can be set to help start a new forum.

Global Administrator Permissions

By default the Administrators usergroup has the Standard Admin role. This will prevent anyone but the Founder from assigning any other Admins, editing Roles, and installing any language packs, styles or modules into your forum.
By default the Standard Admin Role cannot use other's permissions. This makes maintaining permissions more difficult, so I would recommend editing the "Standard Admin" Admin role and adding the permission "Can use others permissions".

Global Moderator Permissions

By default the Global Moderators usergroup has the Standard Moderator role. This allows them to moderate any forum they can see, but does not allow them to change a post's author or ban users.
Add the Standard Moderator or Full Moderator Role to the Administrators usergroup. This will allow your Administrators to moderate any forum, without having to add them to the Global Moderators usergroup.

Global User Permissions

Administrators and Global Moderators usergroups start with All Features User role, which is fine.
Registered Users start with Standard Features User role, which gives them most normal user rights, but does not allow them to change their username or default usergroup and a few other things.
Standard Features User role allows users to hide their online status. You may want to edit this Standard Features role and set this permission to No.
Guests start with custom Global User permissions that only allow downloading and searching.

Forum Moderator Permissions

Administrators and Global Moderators would have Global Moderator permissions, so it is unneccessary to assign them as Forum Moderators.
If you will have junior moderators who will moderate individual forums, add those users to those forums' moderator lists, or create moderator usergroups for those moderators and add the usergroups here. Assign the users or usergroups appropriate Moderator Roles.

Forum User Permissions

For most forums, give your Administrators and Global Moderators usergroups the Full Access Forum Role. This will allow them to make Stickies and Announcements.
Give your Registered Users usergroup the Standard Access Forum Role for any forums except your admin/mods-only forums or other hidden forums.
Give Read Only Access Forum Role to the Guests usergroup for forums you want un-registered guests to be able to read.
Add the Bot Access Forum Role for the Bots usergroup for the same forums you want guests to read, so webcrawler searchbots can index those forums.
The No Access Forum Role would be more useful with "Never" permissions than its current "Nos". Edit the No Access Forum Role and change "Can see forum" and "Can read forum" from "No" to "Never". This will allow you to use this role to block access to a forum for a small group.

(Original post: http://www.phpbb.com/kb/article/phpbb3-permissions)

Article Details

Article ID:

Created On:

02 Dec 2008 08:03 PM