Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T17:50:06Z
I've a forum and I want to allow guests to comments...

However, I've noticed that any guest user can delete anothers guests comments...

This seems a very serious issue, don't you think? Or am I doing something wrong?

I am using by YAF 1.9.6 BETA 1 (4b3c9eb7e948)
Sponsor
Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T17:51:31Z
A guest user can even edit another people's comments!
Zero2Cool
2011-09-23T18:48:17Z
On the forums individual role permissions, it appears you may have given Guest the role of Admin.

Host > Settings > Forums > Edit (on any forum)

Towards the bottom of the page, you'll see "Edit Forum:"

Under "Group" you'll see "Guests" make sure in the drop down menu on the right, they have "Read Only Access" or "Member Only Access" and not "Admin Access".
Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T18:56:55Z
Originally Posted by: Zero2Cool 

On the forums individual role permissions, it appears you may have given Guest the role of Admin.

Host > Settings > Forums > Edit (on any forum)

Towards the bottom of the page, you'll see "Edit Forum:"

Under "Group" you'll see "Guests" make sure in the drop down menu on the right, they have "Read Only Access" or "Member Only Access" and not "Admin Access".




It says "Member Access". Here you can see an screenshot:

Guests access

Zero2Cool
2011-09-23T18:58:26Z
Is the Guest removing other Guests or Members posts? Also, do you have Members role defined to allow deleting of others posts?
Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T19:06:47Z
Originally Posted by: Zero2Cool 

Is the Guest removing other Guests or Members posts?



Only other guests posts.


Originally Posted by: Zero2Cool 

Also, do you have Members role defined to
allow deleting of others posts?




I don't understand your question.

I don't see any "Members role". I see "Administrators", "Guests", or "Registered".

Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T19:09:03Z
If it helps, you can see roles definition here: http://dl.dropbox.com/u/6286874/temp/guest2.png 
Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T19:25:24Z
I think I have founded and fixed the issue.

Right now, I've edited access masks this way:

Access masks

And I've assigned "Read only access" to guest's users.

It works!

Is this the expected way? I think it is not obvious for newbies... I think a guest user shouldnot be able to eliminate posts under ay circunstances...
Zero2Cool
2011-09-23T19:55:03Z
I'm not sure if that's intended. Sorry, I should have said Mask, not Role I think. I've only allowed Guests read access so my experience is limited on that area.
tha_watcha
2011-09-23T20:03:19Z
Ok here is the problem: if you set the access mask for guest user roles to member, every guest can edit/delete/ create by default, because a guest user is basically in yaf one user. The problem is also here in that forum.

if you want to allow guests to post message but not delete or edit the only solution is to create a new access mask with post allowes and edit and delete, and assaign that mask to the guest role.
UserPostedImage
Pau
  •  Pau
  • 65% (Friendly)
  • YAF Lover Topic Starter
2011-09-23T20:15:56Z
Thanks anyway. You guided me in the right direction. 🙂

About Us

The YAF.NET is an open source .NET forum project. YAF.NET is supported by an team of international developers who are build community by building community software.

Powered by Resharper Donate with PayPal button

Project Twitter Updates

Copyright © YetAnotherForum.NET & Ingo Herbote. All rights reserved