- Affected App
- WoltLab Suite Forum
So changing the permission setting under the user group, Guest, so that they will not see the person online... Doesn't seem to work and guest can continue to see who is online.
So changing the permission setting under the user group, Guest, so that they will not see the person online... Doesn't seem to work and guest can continue to see who is online.
Hi @Adam Howard,
Check Everyone permissions. If Everyone can see users online list, everyone (literally) can see it.
everyone is the counterintuitive user group
Personally I don't like Everyone usergroup. I prefer to set every usegroup's permissions. It isn't intuitive. I have Everyone without any permission and every usergroup with their respective permissions.
You can just disabled everything for everyone and then you can set the permissions you like.
Personally I don't like Everyone usergroup. I prefer to set every usegroup's permissions. It isn't intuitive. I have Everyone without any permission and every usergroup with their respective permissions.
To use "everyone" the way it should be used or the way they implied it to be used... Given that members are counted in the "everyone" group... They should exclude guest.
They should exclude guest.
Then it won't be everyone.
The point is that it should be considered a helper group which lets you set up things regardless of the actual user. To create an internal forum for moderators, you can simply deny access for "Everyone" and grant access to "Moderators". Without the Everyone group you would be required to deny access for both "Guests" and "Users" to achieve the same result.
Then it won't be everyone.
The point is that it should be considered a helper group which lets you set up things regardless of the actual user. To create an internal forum for moderators, you can simply deny access for "Everyone" and grant access to "Moderators". Without the Everyone group you would be required to deny access for both "Guests" and "Users" to achieve the same result.
Yes, but if I deny everyone... Would that also include my registered members? I want them to see it.
My example was explicitly talking about Moderators. If you just want to exclude Guests, then you simply strip access for the "Guests" user group. Both "Guests" and "Everyone" have a reason behind them and sometimes the first or the later is the better choice. Just because you have a hammer, not everything is necessarily a nail.
My example was explicitly talking about Moderators. If you just want to exclude Guests, then you simply strip access for the "Guests" user group.
Re-read post #1
That is what I am reporting. Strip guest access does nothing. If I do this to the "everyone" group, wouldn't that also affect the registered group?
Hold on, there are two different types of mechanics in the system. The first one is the user group management where the "Everyone" group is the base and all other groups a user is member of can exceed these permissions (but not negate them!). The second one is the ACL based ruleset for example when setting permissions for a specific forum, these are different because having no user (group) in the list means that the global permissions will be used. Essentially the ACLs are a way to override global permissions per object (in that case forum/category).
Now that we got that clear, my mind messed up everything by believing you were talking about forums (don't ask me how I came to that conclusion, my brain knows it neither). If you want to disallow guests viewing the users online list, revoke the permissions for "Everyone" and "Guests" and grant it for "Users".
Hold on, there are two different types of mechanics in the system. The first one is the user group management where the "Everyone" group is the base and all other groups a user is member of can exceed these permissions (but not negate them!). The second one is the ACL based ruleset for example when setting permissions for a specific forum, these are different because having no user (group) in the list means that the global permissions will be used. Essentially the ACLs are a way to override global permissions per object (in that case forum/category).
Now that we got that clear, my mind messed up everything by believing you were talking about forums (don't ask me how I came to that conclusion, my brain knows it neither). If you want to disallow guests viewing the users online list, revoke the permissions for "Everyone" and "Guests" and grant it for "Users".
So in other words...
Without the Everyone group you would be required to deny access for both "Guests" and "Users" to achieve the same result.
This holds true even with the "everyone" group.
everyone is the counterintuitive user group
I believe you just unintentionally proved @Rasty's argument. lol
Don’t have an account yet? Register yourself now and be a part of our community!