IntegraMOD

Your phpBB Version: 2.0.22
phpBB Type: Integramod 141
MODs: Yes
Your knowledge: Basic Knowledge
Board URL: http://rpghq.org

PHP Version:
MySQL Version:


What was done before the problem appeared?
Created and manipulated forum permissions and allowed groups to view hidden forums as Junior Admin


What was done to try to solve the problem?
Doesn't exactly apply here



De.scription and Message

I don't know if this is a bug, but for my needs, it's a bug to us. Using my Junior Admin account (mostly for testing) I only gave myself very limited access to the forums and functions inside the ACP. using that account I logged into the ACP and went into forum management and was able to see every single forum on the site, even the ones my Junior Admin account does not normally have access to and I was able to alter teh permissions for any given forum.

Additionally I was able to go into the groups and add a group to forums I had no access to. The ones I had no access to where there, but blank. Being that I setup all the forums, I can pretty much make a good guess, but if I didn't know the order, I could always go into the forum management and look at that to see where 'X' forum is. I know I didn't explain to well, so let me give an example..

As Junior Admin, I have access to forums A, B, and C. Forums X, Y, and Z are hidden from me in the index view. I can't see them and dont even know they exist. I go into the ACP and look in forum Mangement, There is A, B, C, X, Y, and Z, and I can change all the permissions I want to on that forum. I can even go into my user settings and give myself access to those forums.

So I decide to go into group permissions, and I want to give a group access to the forums X, Y, and Z now that I know they are there. I look at the forum list, and there are 6 forums, but only A, B, and C have the forum name there. The other 3 are blank lines. I just saw what those 3 blank lines were in the forum management, so I can give whatever group I want permission to those 3 hidden forums.

It looks like someone took this into account, but never really finished locking it down. I'd like to be able to limit my Junior Admins to only have access to manipulate the forums they have access to normally when viewing the index.. or at least have the option of opening everything up to them.

Was there ever an intention to add this security? If so, then this is definitly a bug. If not, then maybe a future mod?

Anyone know?

It being a "bug" all depends on how you percieve a junior admin to be.

I once used Junior Admins on my site, and basically the ONLY reason I did not give them full admin on the site was because there are things in the admin panel that if you happen to hit by accident (or on purpose because you dont know what it does) you can mess up the forums. Therefore I was giving Junior Admin positions to guys that were helping me run the site who aren't as "savvy" as I am with IntegraMod.

However one thing to note is that they still wont have access to Admin-Only section of the "manage users" page which is rather frusterating.

That being said, it's not a "bug" really as your problem is more of a feature problem (meaning junior admins do not have that feature) and that's mainly because the creators of that modification probably don't see the use of Junior Admin's the same way you do. You really don't want a bunch of people in your admin panel of your forums if you're trying to keep them out of some of the forums of the site. That's kinda what being an "admin" is all about Being able to see everything.

But my personal views on junior admin aside, I guess I can see where it would be nice addition to that modification if somebody could write it in.

Zac

I actually use the junior admin for one of our guys. He is a web designer and uses php, html, bbcode and possibly others. I gave him access to our IM Portal area so he could check, cleanup & maintain anything I attempted to create. (LOL I'm extremely new at this so he fixes my mistakes)