Gallery Moderator Permissions

[StuartDH]

It would appear that by naming individual members with moderator permissions in this way (via the edit categories page), they also have the facility to delete posts and images

Is there a way around this, so we can set moderators (preferably usergroup, rather than individual names) to moderate new uploads, edit posts etc, but not be able to delete anything.

[KW802]

StuartDH,

You want to choose...

ACP => vBGallery => Usergroup Permissions => {Choose group} => Go

... and then change the various options like "Can delete other's images" accordingly.

[StuartDH]

Hi KW802,

I've already done that and made sure the group that I set up 'Gallery Editors' had been given the options:

Can delete own images - No
Can delete other's images - No

but they still can. I also checked that the users weren't members of any other groups - Primary and Display Group is 'Gallery Editor' and no other additional groups

[KW802]

... and they can still delete images after they've been moderated or is it images that are waiting to be moderated that they can delete that you want to change?

[StuartDH]

Yep, they can delete images that have been moderated.

I've just tried it again and I've currently got a user set up with the 'gallery editor' permissions set to not be able to delete, both universally and also checked in the custom permission for the category. I've looked in the permissions for 'moderators' which is a group that this user isn't in, but also made sure that they don't have access to delete own or others.

I added the user as a moderator to just one or two categories via the 'edit category' page and that has given them access to moderate all images in just those categories (no others), but this includes being able to delete previously moderated pics that have been on the site for a year.


Running Photopost vBGallery 1.0.1.

[KW802]

I'll have to experiment a bit on this one. I'll play around on my site to see if I can narrow down what's going on with it.

[StuartDH]

Any news on this one Kevin, still the same problem on my install

[StuartDH]

I take it that this is a bug? Do I need to submit it as a bug anywhere or has it been put in already?

[StuartDH]

bump!

[StuartDH]

***bump again***

[KW802]

StuartDH,

I've finally had the chance to update to the latest versions of everything and to poke around a bit.

The short answer is: To allow such granual tuning of the user permissions (eg: being able to moderate but not delete) without making any changes then the easiest thing would be to create a new vBulletin usergroup modeled after the "moderators" group, change the usergroup permissions for the new group in the Gallery settings so that they can't delete other's images, change the category permissions for the new group accordingly, and then add the moderator to that group as a secondary group.

What's happening is that if you "Add Moderator" to a specified category then that user has access to all of the "Admin Options" from the Image Tools drop-down box, which includes deleting, regardless of their usergroup permissions. The Add Moderator function essentially acts as a giant override to all of the permissions and gives them the Stick Image / Close Image / Set as Category Image / Delete This Image options. Really the "Add Moderator" option should be renamed as "Add Admin" or in the Gallery ACP there should be a new configuration menu to define "Gallery Moderator" permissions because a "moderator" really shouldn't have access to everything by default.

I'm going to copy this thread into the Suggestions forum so that it's looked at when features are added but in the meantime it looks like the slightly more complicated but changeless method will be an additional vB group.