Edit userlevels?

Davy · Post by **Davy** » Sat Jan 13, 2007 7:24 pm

Hey!

I'm asking loads of things, I know... So here's one more:
In s9y 1.1 you've the possibility to edit usergroups. That's a quiet good functionality! But is it still possible to edit the "old" userlevels? The problem is that some of the installed plugins on my blog use that system, and I want to make some more restrictions. If I don't my users can edit things that they can't use (like a WYSIWYG-editor).

Maybe this can be done more easily, but I couldn't find it anyway.

Thanks for an answer!

Post by **garvinhicking** » Sun Jan 14, 2007 1:46 pm

Hi!

The old "userlevels" are on a per-user basis, not per-group. So you can still edit users and assign userlevels to them for backward compatibility to plugins.

HTH,
Garvin

Davy · Post by **Davy** » Sun Jan 14, 2007 2:03 pm

Hey!

Okay, I get that point. But now there's the following problem: I need to give my users the level "Administrator", while they must be able to use plugins. But when I do so, they can also edit lots of settings that they simply can't use. So I set the userlevel to "Standard editor", and then all settings are good, but the plugins are no longer accessible...

If it's possible to let the plugin work with usergroups, it would be great! Is there any documentation on that topic?

Post by **garvinhicking** » Sun Jan 14, 2007 2:12 pm

Hi!

That's right. You cannot achieve what you aim to do, I'm sorry - there's no way. You can't tell plugins that people are administrator without making the core believe the people are admins.

Of course the plugin can be made to work with usergroups! It just needs to be coded. Sadly, currently there is no plugin that makes use of it.

Code documentation is only available at sourcecode-level inside the file "include/functions_config.inc.php".

HTH,
Garvin

Davy · Post by **Davy** » Sun Jan 14, 2007 2:42 pm

Well, I'll have a look there during the next week. I've already patched the Userprofiles-plugin so that you can only edit your own profile, so maybe this problem can also be solved...

Davy · Post by **Davy** » Wed Jul 11, 2007 7:09 pm

Hi!

I know this topic is pretty old, but I thought it's the best place to ask this question.
If I use the "User-Selfregistration" plugin and set the userlevel to "Administrator", is that safe? My users should only be able to edit their own profile. But how about the old userlevel-system? Is it safe to give users the highest level?

Thanks in advance!

Post by **garvinhicking** » Wed Jul 11, 2007 7:22 pm

Hi!

If I use the "User-Selfregistration" plugin and set the userlevel to "Administrator", is that safe? My users should only be able to edit their own profile. But how about the old userlevel-system? Is it safe to give users the highest level?

It definitely is dangerous. This could enable them to fully take on your system!

If they drop out of all usergroups, or if you use any plugins like staticpages etc., your users will have the full administrative rights to your blog.

I highly, highly recommend to not do that. It is much better to only give those people editor rights? What are your reasons for wanting to set them to Administrators? Which plugins require admin rights to be usable for your people?

Best regards,
Garvin

Davy · Post by **Davy** » Wed Jul 11, 2007 7:27 pm

Well, the thing is that the User Profiles plugin didn't work when I used Standard Editor. But indeed, I was already afraid of that Administrator-level.

Edit userlevels?

Edit userlevels?

Re: Edit userlevels?