how are this permissions set ?
how are this permissions set ?
In order to edit headers, you need permission to create/edit articles in the wiki forum where headers are actually saved (which you set up in the Namespace Manager).
- lead developer for VaultWiki
Or, this could be done by editing forum permissions in ACP. Set every usergroup to have permissions you like. For example I allowed only moderators to edit headers. Also there was "security" problem that in profile was visible last wiki article user edited, so if some of moderators edited header, following that link and having usual usergroup permissions user could gain insight in contents of other headers.
And yes, I use headers to keep important information for moderators and admins, so this is potential problem. But, I managed to solve this by enabling "problematic" usergroups only to:
Can View Forum
Can View Thread Content
Everything else should be disabled. In this way users of this usergroups could see header, but not edit it and could gain access to header directory (and thus see contents of other forums' headers).
Bookmarks