Prevent users from creating higher group users than themselves

Moderators: mandville, PhilD, General Support Moderators

sseguin
Joomla! Intern
Joomla! Intern
Posts: 72
Joined: Sat Apr 10, 2010 2:24 am

Prevent users from creating higher group users than themselves

Postby sseguin » Fri May 27, 2016 9:14 pm

Hello. I have a site with several user groups defined

Admin Level 1
-Admin Level 2
--Admin Level 3

Ideally I want level 1 users to not be able to use the user manager to either upgrade themselves or create new users in groups 2 or 3. Same for level 2 users, prevent level 3 editing or creation.

Any way to accomplish this?

Thank you.

User avatar
sozzled
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3420
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia
Contact:

Re: Prevent users from creating higher group users than themselves

Postby sozzled » Fri May 27, 2016 10:34 pm

This may not be very helpful, but I'm not sure how you can do that or, perhaps equally importantly, whether you should. It really boils down to the question of who can access the Joomla backend and what they can do when they get there. The question is also open for discussion about how many people should have administrator rights.

I'm guessing that you could probably define levels of access to the User Manager with Joomla ACLs—I wouldn't want to lead you in the wrong direction—but I suspect it's fairly complicated. Perhaps, by the time someone replies to this topic, you will get the answer but you may decide that, in the long run, it isn't worth the effort. I would suggest that you could look at the "problem" laterally: ask yourself, do I really need all of these administrators getting into the backend and doing things that I don't want them to be able to do?
https://www.kuneze.com/blog
Former member of Kunena project team
If you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

sseguin
Joomla! Intern
Joomla! Intern
Posts: 72
Joined: Sat Apr 10, 2010 2:24 am

Re: Prevent users from creating higher group users than themselves

Postby sseguin » Fri May 27, 2016 11:12 pm

Hi, unfortunately there are a few groups of people on our staff that do require Administrator Back-end access to maintain the site, as we post 50-70 pieces minimum per day. ACL has already been set for everything else and restricted to what they require, however this is the final step to really be through in the setup.

User avatar
sozzled
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3420
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia
Contact:

Re: Prevent users from creating higher group users than themselves

Postby sozzled » Fri May 27, 2016 11:19 pm

True. Maybe you could restrict their backend access to Manager? Manager (instead of Administrator) will still give them backend access but they would limited to creating/editing article content. Just a suggestion.
https://www.kuneze.com/blog
Former member of Kunena project team
If you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

sseguin
Joomla! Intern
Joomla! Intern
Posts: 72
Joined: Sat Apr 10, 2010 2:24 am

Re: Prevent users from creating higher group users than themselves

Postby sseguin » Sat May 28, 2016 1:18 am

They already have ACL setup for the access they need, but I just need to restrict them to which user groups they can create. Please refer to the original post at the top.

User avatar
sozzled
Joomla! Virtuoso
Joomla! Virtuoso
Posts: 3420
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia
Contact:

Re: Prevent users from creating higher group users than themselves

Postby sozzled » Sat May 28, 2016 1:37 am

sseguin wrote:Please refer to the original post at the top.
Sorry. OK ... I can't help you with that. Good luck :)
https://www.kuneze.com/blog
Former member of Kunena project team
If you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

sseguin
Joomla! Intern
Joomla! Intern
Posts: 72
Joined: Sat Apr 10, 2010 2:24 am

Re: Prevent users from creating higher group users than themselves

Postby sseguin » Sat May 28, 2016 1:45 am

No worries, thank you for your comments and suggestions though.

sovainfo
Joomla! Exemplar
Joomla! Exemplar
Posts: 8818
Joined: Sat Oct 01, 2011 7:06 pm

Re: Prevent users from creating higher group users than themselves

Postby sovainfo » Wed Jun 22, 2016 9:54 am

Suggest to check Community or Membership extensions, they normally extend the account management of core Joomla. It is a all or nothing situation for account management in Joomla core. Unless you use external account management (LDAP etc).
Issue with migrating? Include logs/joomla_update.php in your report!
Blank screen? Verify pagesource for HTML code (javascript error)
Installation failing on populating database? Install with set_time_limit(0)
Document your customizations!

sseguin
Joomla! Intern
Joomla! Intern
Posts: 72
Joined: Sat Apr 10, 2010 2:24 am

Re: Prevent users from creating higher group users than themselves

Postby sseguin » Fri Mar 24, 2017 1:45 pm

Has there been any newer way of accomplishing this discovered?


Return to “Access Control List (ACL) in Joomla! 3.x”

Who is online

Users browsing this forum: No registered users and 4 guests