Permissions

ADMINISTRATION DOCUMENTATION > MEMBERS > PERMISSIONS

General Permissions

Board Permissions

Permissions are powerful, and can be confusing, as they are set for each individual permission to one of three options rather than just on or off.

• [D] means any/every member of that group is explicitly denied permission (regardless of any other group memberships).
• [X] means (conditional) denied permission, denied unless the user is also a member of a group that has permission [A].
• [A] means (conditional) granted permission, granted unless the user is also a member of a group that is explicitly denied [D] permission.

Here are how board permissions work by use of several examples.

• Assume a user is assigned to member group A. If you set the access permissions for the board this way..

Group A ---  A   X  [D]
Group B --- [A]  X   D

then that user is denied access because the user is in Group A and Group A is specifically [D]enied.

If the user is assigned instead to group B, (instead of group A)

• then that user has access to that board as Group B is specifically [A]llowed

What if a user is assigned to both Group A and Group B?

• By virtue of membership in Group A set to [D], the user still can not access that board.

---

But what if the board permissions are set this way..

Group A ---  A  [X]  D
Group B --- [A]  X   D

• Then a user with membership in Group A is still [D]enied,
• but if a member of both groups then the member is allowed access to that board because of membership also in Group B.

---

Another example (this applies to all permission logic - member or board permissions - in ElkArte permission settings):

Group A ---  A   X  [D]
Group B ---  A  [X]  D
Group C --- [A]  X   D

• A member of Group A is denied permission regardless of any other group membership
• A member of Group B is denied permission unless also a member of Group C
• A member of Group C is granted permission unless also a member of Group A

If you set group A to [X] above, then anyone with Group C membership has the permission, now including Group A members if they are also a member of Group C.

Hope this helps explain the permission logic. In summary:

Group A	Group B	Result	Explanation
A	A	allowed	Not specifically denied
A	X	allowed	A beats X
A	D	not allowed	D always beats A
X	X	not allowed	Not specifically allowed
X	D	not allowed	D always beats X
D	D	not allowed	Specially denied

This page is a stub. Please help improving it.