You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jun 4, 2019. It is now read-only.
So in general, we want some role based authentication system (because maybe I don't really want to add other administrators, maybe I want to add people that are allowed to administer just the forums).
Something like a role system and an API for allowing plugins to hook into that as well so that you can from one central place manage which of the various plugins a given 'backend user' is allowed to fiddle with?
Absolutely with @knewter here, but I think we also need to specify multiple levels of control. How about an API that lets your plugins register themselves and sub-permissions underneath that? So if I was modifying a group to let them mod a forem installation, inside the group form, you'd get something like this:
Forem
[x] Can view all forums
[x] Can edit posts
[x] Can edit other users's posts
As neat as that would be, I'd be worried that it'd be hard to deal with complex permissions as in forem's 'Can view specific forum' option. How could we handle that? Alternatively, is this creeping too far into the user space and too far out of the code?
So if the work becomes overwhelming, I can delegate it to someone else.
The text was updated successfully, but these errors were encountered: