myBB weak spot?

Discussion in 'MyBB Discussions' started by Sunsettommy, Oct 28, 2009.

  1. Sunsettommy

    Sunsettommy Adept

    Joined:
    Oct 21, 2009
    Messages:
    280
    Likes Received:
    14
    Alex:

    Come on Alex,why are you so dense?

    I keep pointing out over and over that anyone who is appointed as an Administrator in SMF, by DEFAULT has ALL of the permissions,there are NO levels of administrative permissions to assign.They have FULL access to the SMF ACP.

    myBB by contrast has the ADMINISTRATIVE PERMISSIONS tool,where the Super Administrator can assign levels of ACP access to appointed Administrators.

    You need to read post #8,10

    From post #14,I wrote:

    "In SMF the Administrator has ALL the permissions by default.There is no possibility to edit them.That means anyone assigned as an Administrator,beside the owner can do the same thing as the owner except use the FTP uploads."

    Meanwhile by your OWN admission that SMF does not really have a Super Administrator,from post #27:

    and again you write at post # 33

    Oops,:o

    I correctly stated,today:

    "SMF Super Administrator status is weak,while in myBB it is strong because he can control his administrators activities through the Administration permission set up.SMF has nothing because it is ALL permissions by DEFAULT."

    Meanwhile you write:

    Ok call it a lack administrative permission capabilities,which is what I have been pointing out all along.

    The security concern I keep pointing out is the inability to keep anyone (appointed administrator or Global Moderator with additional access),from having access to SETTINGS area of the SMF ACP while giving them access to working on themes.

    myBB for about the 10nth time I have explained allows for such permission discrimination.

    That is the security concern I have been bringing up,over and over.

    For ME what is important,is to keep everyone else from having access to the forums SETTINGS area in the ACP.THAT INCLUDES ALL APPOINTED Administrators and Global Moderators!

    That is what I keep bringing up over and over and you never seem to get it.

    Sigh.
     
  2. Sunsettommy

    Sunsettommy Adept

    Joined:
    Oct 21, 2009
    Messages:
    280
    Likes Received:
    14
    Bingo!

    Unfortunately SMF does not make it possible for me to assign a Global Moderator to work on themes and be blocked from settings access.

    myBB makes that possible easily.
     
  3. MjrNuT

    MjrNuT Grand Master

    Joined:
    Oct 14, 2009
    Messages:
    579
    Likes Received:
    36
    Yup, this is a fantastic part of vB.


    double Bingo
     
  4. Sunsettommy

    Sunsettommy Adept

    Joined:
    Oct 21, 2009
    Messages:
    280
    Likes Received:
    14
    SMF seems to be the only one that has ZERO Administrator Permissions settings in it.The only one that has by DEFAULT settings for any Administrator in a SMF forum.That can not be changed at all.

    Maybe they fixed that in the 2.0 version?
     
  5. alex@

    alex@ Adept

    Joined:
    Oct 28, 2009
    Messages:
    155
    Likes Received:
    2
    Location:
    DK
    First Name:
    Alex
    WRONG AGAIN!!! You do it with a Global Moderator profile... a stated many times....
     
  6. Sunsettommy

    Sunsettommy Adept

    Joined:
    Oct 21, 2009
    Messages:
    280
    Likes Received:
    14
    LOL,

    I am talking about ADMINISTRATORS!
     
  7. MjrNuT

    MjrNuT Grand Master

    Joined:
    Oct 14, 2009
    Messages:
    579
    Likes Received:
    36
    Maybe some SS to help explain more of the situation. I may be reading wrong, but alex needs to take it down a notch....?
     
  8. FullMetalBabe

    FullMetalBabe Zealot

    Joined:
    May 30, 2009
    Messages:
    2,912
    Likes Received:
    339
    5 pages explaining the same thing....
     
  9. MjrNuT

    MjrNuT Grand Master

    Joined:
    Oct 14, 2009
    Messages:
    579
    Likes Received:
    36
    A picture speaks a 1000x (w/e) words. :p

    I'm saying this NOT for yours or my benefit. lulz
     
  10. FullMetalBabe

    FullMetalBabe Zealot

    Joined:
    May 30, 2009
    Messages:
    2,912
    Likes Received:
    339
    :P You're right.

    I tried to make this as simple as I can. Let's take for example, you're the root admin and you have another admin, but because of precautions, you don't want that admin to have access to the forum and post and configuration, but you still want them to be admin. In SMF you can't do this, you would have to demote them to global moderator and checkmark 'Access to the forum and database' but you don't want them to have access to the database at all! or the forums.

    On SMF, you can't change the admin permissions from admins individually.
    awww.adminaddict.net_data_MetaMirrorCache_3f89a962d56b1251f02995e5926d819b.png

    But on MyBB, you can, making it less likely that you will get 'backstabbed'.

    awww.adminaddict.net_data_MetaMirrorCache_11ce63bdcfdc31572c0823b175f73710.png
    awww.adminaddict.net_data_MetaMirrorCache_8bc6282e2eca2e1bcf1417f492d22703.png
     

Share This Page