myBB weak spot?

Sigh,

Here is what it shows in the SMF ACP for General Permissions for Global Moderators:

Forum administration

Administrate forum and database

Manage boards and categories

Manage attachments and avatars

Manage smileys

Allow access in maint. mode

Edit news

Now here is what it states when clicking on the ? next to this line:

Administrate forum and database

"This permission allows a user to:

• change forum, database and theme settings
• manage packages
• use the forum and database maintenance tools
• view the error and mod logs

Use this permission with caution, as it is very powerful."

But in myBB I can limit someone to just this:

You can limit them to see:
Home | Forum & Post |Templates & Style |

out of this:

Home | Configuration | Forum & Post | Users & Groups |Templates & Style | Tools & Maintenance

In SMF he could mess with my forum,with full access to the very core,just to make it possible for him to work with the theme settings,but in myBB he could do this as I wanted him to be able to do,WITHOUT access to the myBB core.:

Templates & Style

I DO NOT WANT ANYONE ELSE HAVE ACCESS TO THE MOST SENSITIVE AREAS OF THE ACP.That is the point.

 

@ Alex@ Omg.... Dude, really?

By default MyBB has the same groups, but you have more freedom.

On Moderators, you can edit and limit the access to if they can edit posts or not, etc, add mods to different forums and enable certain access of the ACP if you want.

Smods/Super Moderators/Global Moderators have their OWN moderation panel, they can make announcements, ban users, give out warnings, also set as different mods on forums and enable certain ACP access if you want.

Administrators
Can do everything, and if you have one more than one admin and you're the root admin, you can limit access of the acp to that other admin.

More freeeeedommmm

 

Alex writes:

But it is in DEFAULT only in SMF! You can not alter them.

In myBB,I can chose a level of administrative permissions.Thus I have permissive control over the administrators I appoint.

Thus giving me greater security and control over administrators.

 

I understand that SMF has a good set up,but myBB just allows for more permissive control over other administrators and that is important TO ME.

Do you realize that I run a forum on SMF software?

 

They can have more than one section of the Forum Administration,if the Administrator checks the boxes there.

This what shows in the ACP,for Global Moderator General Permissions area:

"Forum administration

Administrate forum and database

Manage boards and categories

Manage attachments and avatars

Manage smileys

Allow access in maint. mode

Edit news"


Each line has a check box the administrator can chose to assign some administrative functions.

The problem is that the first line permission is way too big.They should have kept the theme settings out of it.

 

Ahh, so you just want it split up in another way! That's not the same as SMF doesn't have the options
I also checked with SMF 2. You can actually give a Global Moderator group full access to everything, except deleting the admin. So there's your non-super admin.

 

:S Access to everything...which is what he doesn't want, if you read well the millions[obvious exxageration obvious, but with some people might take it seriously] time he posted that.

 

That was not an answer to the original post... and it's you guys that doesn't read what I'm writing.
As i stated in one of my early posts, it all comes down to what you call it - global moderator, admin, moderator. The options are more or less the same, just named different aparently.
It's not the same coders who did the two forums, they do things their own way. You claim myBB does it the right way, I don't claim anything. I just state the options are the same in SMF. Different names - same options.

 

I wasn't claiming ANYTHING on my post, I just stated MyBB gives you more freedom upon this.

 

In SMF, if you want somebody to do some editing of your forum skin, do you have to make them a full admin with access to the whole of the admin options, or can they do it if they are a global mod with access to just the styling section?

 

So when did you try SMF the last time? I know nothing about myBB, I just say SMF has at least the same options.

The author searches a specific option that SMF doesn't provide when it comes to splitting out specific admin options seperately. That's because SMF is designed different. But I could probably do the same the other way around.

 

In SMF you have to give them full access to the adminCP.

SMF doesn'...forget it. :|

/end my posting here.

 

:lol: No I know, I was just trying to figure out if that was the whole bit that was being argued about.

But now I wish I never opened this thread, I'm very confused

 

Not true. You can give access to certain areas.

I checked myBB last night, and yes, myBB does split up admin access more than SMF does. Unfortunately for the author, the access he wants to give a specific member, is not possible in SMF.

In SMF, permissions are grouped like in myBB. The only difference is that the admin section is split more up in myBB. That's a nice feature. But any other section differs in no way.
In fact, SMF gives you a lot more power, as you can create permission profiles depending on other permission profiles (inherited permissions). Or make them independent. You can then assign several permission profiles to each member.
I can't see you can do this in myBB, but correct me if I'm wrong.

 

No, no, the forget it wasn't for you, it was for Alex@ since it's 4 pages and he doesn't seem to grasp it.

@ Alex@ yes you can, you can create other groups that inherit the same functions of the group you select and add your own permissions. If you created 3 additional groups- Premium, Gamer and Anime freak, and you want your members[or only one of your members] to be in all of them, you can do so as well.

 

It took you guys quite some time to explain what specific option was needed to access
It was a discussion about sections of the admin panel, more than specific option. And then the discussion whether SMF could have non-superadmins.

Fortunately, SMF is very easy to modify when it comes to permissions. It took me ½ hour to figure out how it can be done with theme. Maybe I'll make a mod with extended admin permission groups.

 

You can appoint someone to be administrator easily,but they automatically have ALL of the administration forum permissions,since that is the DEFAULT setting,there are no built in administration permission settings in SMF ACP.But a Global Moderator can have some Administrator access too,for an example by clicking on this line in the ACP in SMF:

Administrate forum and database

In there is the access to themes,the problem is that a Global Moderator now has access to the most sensitive areas of SMF,as this description explains for the blue sentence:

"This permission allows a user to:

• change forum, database and theme settings
• manage packages
• use the forum and database maintenance tools
• view the error and mod logs

Use this permission with caution, as it is very powerful."

See the problem?

The Global Moderator will have too much access,just to work on some themes.

But with myBB I can limit an Administrator to just this,and thus keep him out of the SETTINGS area (as pointed out by Fullmetalbabe):

You can limit them to see:
Home | Forum & Post |Templates & Style |

Out of this full line:

Home | Configuration | Forum & Post | Users & Groups |Templates & Style | Tools & Maintenance

This was fully explained in my post #41.

From the start I have tried to explain why I stated that myBB is better for forum security,because in appointing Administrators,I can keep them out of the CONFIGURATIONS and TOOLS & MAINTENANCE areas of the ACP, by use of the Administrator Permission tool.

In SMF,appointing anyone as Administrator has access to ALL the sensitive areas,since being administrator in SMF is by DEFAULT has full access.There is no way around it.Alex never has contradicted this fact,but seems to continually misunderstand where I am coming from.

SMF Super Administrator status is weak,while in myBB it is strong because he can control his administrators activities through the Administration permission set up.SMF has nothing because it is ALL permissions by DEFAULT.

Gosh I hope I covered everything and make sense at the same time.:shrug:

 

A Global Moderator can do it as explained in my post #45.

But as I have pointed out several times to Alex,he now has access to the settings area of ACP,just to be able to work on some themes.

You pointed out that in myBB,the use of the ADMINISTRATION PERMISSIONS panel,can limit an administrator to only one area such as you posted in post #21 in detail:

From this,

to this,

No such discrimination exist at all for administrators in SMF.

 

You are continously stating that it's a bad thing SMF doesn't have super admins and admins. and I keep stating again and again, that you have the same options with a global moderator group!
And as I have said several times before, the only difference is what you call it! To me, ad admin is an admin and has all rights. So in my book myBB is doing things the wrong way, not SMF.
However I have realized that myBB has more options to split out ceartain permissions, but as I stated it's easy to do the same with SMF.

But this has nothing to do with sequrity. Claiming that SMF is insecure because of the fact that you can't split out as many options in SMF as in myBB is a wrongfull statement.
Call it lack of a feature, not a sequrity issue.

 

inb4page5