Topic: Shoutbox Ignores Permissions

[cloksin]

I have Simple POrtal 2.3.3 installed on SMF 2.0 RC3 (yes, I know, upgrade SMF... in the process, with all the mods I have that's going to require a complete rebuild then databse port, its in the process.) In the meantime, I'm having problems with permissions in Simple Portal.  I need to set permissions for my shoutbox so that everyone initially has permission to use it, but if the privilage is abused, that permission can be revoked.

In theory what I should be able to do is set the shoutbox permission to "One Membergroup" and select the membergroups I want to have permission to the shoutbox, then I would do the same for the block that the shoutbox is in.

When people join my forum they are automatically put into a membergroup called "Unclassified", after they make their first post they are automatically moved to a membergroup called "New Arrival".  After they've finished their arrival thread with a member of my staff, that member of staff moves them to a membergroup related to the department they will be in, and also adds them to a member group named "shoutbox".

I have all three of these groups selected for permissions in both the shoutbox and the block that it resides, yet when using my test member and removing that member from all groups except his primary department group, he is still able to see and post in the shoutbox.  If I change the permissions to "All Membergroups" then only admins are able to see the shoutbox.  Selecting "Ignore Permissions" defeats the purpose.  Is "One Membergroup" broken in 2.3.3?

What can I do to get this fixed.  I've had a problem with a couple of people using the shoutbox to verbally abuse my other members, banning this person works for a limited time as they keep using proxies to log in with new IP addresses and creating new characters, going after other members.

The way my site is set up I need to let new members use the shoutbox, as its a tool to get info and help on how to get started from more experienced players, and I can't block proxies because many of my members use them for various reasons (such as when using a computer in a public place such as a library and ned to circumvent the filters).

I really need to find a solution to this quickly.

Edit: Changed Topic Title and added more detail to describe the issue better 10/14/2011 3:06 PM Eastern US time

[AngelinaBelle]

With "one membergroup", then the member needs to belong to only one of those membergroups.
If you allow permission to
* Unclassified
* New Arrival
* shoutbox
Then anybody who belongs to even one of these groups will be able to see and use the shoutbox.

If you wish to restrict use of the shoutbox, you can change this list to only "shoutbox". This way, only approved users can shout.

[cloksin]

Yes, I understand that, and none of my members will ever be in more than one of those groups at a time.  The member I am testing with is in one group only, a group called "facilities".  Unclassified, New Arrival, and shoutbox are the only three groups that have permission to the shoutbox, yet this member can still see the shoutbox.

[AngelinaBelle]

What is the group ID for 'Unclassified'?

Have you made any customizations to any of your simpleportal files?

[cloksin]

"unclassified" is one of only two post based membergroups (with a post requirement of "0".  Its id is 4.  The other post based group is "new arrival", with a post requirement of "1", its id is 37.

While I have made some modifactions to some SMF php files, I have not modified any SP php files.

[ccbtimewiz]

post based membergroups are all classified under "regular members" (or whatever you renamed that)

[cloksin]

ok, but regular members is not one of the groups I gave permission to the shoutbox to, so when someone has been assigned a primary membergroup other than regular members, they should not be able to see the shoutbox unless they have been assigned to the shoutbox membergroup as an additional group.  However, I have my test member in a primary group (not regular members) and zero additional groups, so in theory this member should not be able to see the shoutbox, yet in practice he can.

[AngelinaBelle]

Anyone with 0 posts will be in "unclassified". Unclassified has permission to see the shoutbox.
Therefore, anyone who has never posted will have permission to see the shoutbox.

Is that correct?

[cloksin]

That is correct, and that is how I want it.

A new member who has just joined and not made any posts yet is in "unclassified", when they've made their first post they get reassigned out of "unclassified" into "new arrival" due to the post requirement of "1" for the "new arrival" group.  When they have completed their arrival process they get manually taken out of "new arrival" and manually reassigned to a primary group that reflects the direction their character has taken during the arrival.

These primary groups have NOT been given permission to the shoutbox, so they are also assigned to the "shoutbox" group which DOES give them permission to the shoutbox.  This is done so that if they end up abusing their shoutbox privilages I can remove them from the "shoutbox" group as a form of moderation/penalty, without affecting their primary "in character role play" group.

In theory this should allow them to continue playing unaffected while only having their shoutbox privilages revoked, but as I've said, even when they are not in the "shoutbox" group they are still able to see and use the shoutbox.

Essentially I want everyone to be able to use the shoutbox, so long as they've registered (guests shouldn't be able to use it, and that part IS working).  Removal of the shoutbox privilage from someone is only used when they break the rules.

(my shoutbox is used as an out-of-character social environment, not affecting the gameplay in any way, but I have had a few members who have used it to attack other members verbally - so to speak - and up till now my only recourse has been to issue a full ban.  I'd like to be able to just revoke the shoutbox permission without banning them.  We pride ourselves on being a site that makes it extremely difficult to get banned from, and we have a very detailed process in place for what actions will result in a ban, and many tiers of "cooling-off" periods before we finally issue a permanent ban, of which we have never issued a permanent ban in over 5 years.)

[AngelinaBelle]

I am sorry. I am completely lost.
Do you want the newly-registered members to be able to shout or not?

[cloksin]

yes

[modded matt]

I have this setup on acidmods.com, all members and guests see the shoutbox, but I can take te privlage away from specific members if needed.

I use "one permission group" when setting up the shoutbox, and I allow all groups access other than a new group I made titled "noshout" (this means that the member only needs to be in one group which has access to the shoutbox) As stated above postcount based groups will give access to the shoutbox, postcount groups on our forum have permissions inherited from regular members. In order to restrict access to the shoutbox, you must remove the troublesome member from any and all other groups, then place them in the "noshout" group.  That will effectively silence the troublesome member. YOU MUST PLACE THEM IN A GROUP THAT DOES NOT HAVE SHOUTBOX PERMISSIONS, IF THEY ARE NOT IN A GROUP, THEY DEFAULT BACK TO POSTCOUNT/REGULAR GROUPS.

It is hard to explain, and even harder to implement, but I have done it. none of my other admin team can get their head around it. I wish there would be better access control in the next version of simple portal.

Feel free to contact me at acidmods.com(modded matt) if you want my help as I am not on here much. I was here looking for info on editing specific pages. as I am making a mobile page for the forum, to only display the shoutbox in a large font whena mobile device is ditected using the movilladitect script.

[AngelinaBelle]

Clocksin,

If you use "one permission", and you allow users in the "0 post group" to post, then you are allowing everybody who has just signed up to post -- they have 0 posts, so they are in the 0 postcount group, and so they can post.
SimplePortal is doing exactly what you told it to do.

If you do not want 0 postcount members to post in the shoutbox, do not allow the 0 postcount group to shout.

[cloksin]

I DO want people in the "0" post group to be able to shout, I want to be able to take that permission away at a later time, from people who have 1 or more post.

modded matt, I understand what you're saying, but removing all the groups from someone I want to restrict shouting to won't work, it will take away all the other permissions assigned to them by those other groups, I might as well just ban them, and that is what I am trying to avoid.

Let me try to explain it again, when someone just registers they go into "unclassified", a zero post group.  these people ARE allowed to shout.  Once they've made a post one of my staff assigns them to a different group, their primary group.  Now they CANNOT shout.  In order to allow someone to shout after they've made a post they need to be placed in the "can shout" group, a secondary group.

This is not working though, they can shout even when they are ONLY assigned to a primary group, even if that group does NOT have permission to shout.

[AngelinaBelle]

Unclassified, New Arrival, and shoutbox are the only three groups that have permission to the shoutbox, yet this member can still see the shoutbox.

Earlier, you said the group New Arrival has permission to shout.
Does New Arrival have permission to shout?

[cloksin]

Yes it does, I left that group out of the last description of the issue to try and simplify the problem.  The point is, the post-based groups are only used for a brief period upon a new player's arrival.  After they are done with their first thread, the post-based groups (unclassified & New Arrival) don't play a part anymore.  After that the only way they should be able to have access to the shoutbox is to be assigned the additional group of shoutbox (or can-shout, same group, different names) 

[AngelinaBelle]

Unclassified, New Arrival, and shoutbox are the only three groups that have permission to the shoutbox, yet this member can still see the shoutbox.

* Unclassified (post count  = 0) has permission to see the shoutbox
* New Arrival (post count = 1) has permission to see the shoutbox
* shoutbox (admin-assigned group) has permission to see the shoutbox.

How many posts has the person made, who you don't want to see the shoutbox?

[cloksin]

My test person has three posts, and can still see the shoutbox and shout in it, this member is not in any of the above three groups, which are the only three groups selected to have shoutbox permission.

[AngelinaBelle]

Thanks for the clarification.  I was getting really confused.
I have not looked at this behavior.  Let me get back to you on that.

I would also like to find out if members of the higher-post-count groups are also members of every lower post-count group.

[cloksin]

Have you had time to look at this further?

Would the "deny" permissions in the new release work to solve my problem?

I like some of the features listed in the new release, but I'm not ready yet to implement it on my live site, and haven't had time to work it into a test site yet.