Prevent users from creating higher group users than themselves

Moderators: mandville, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Windows Defender SmartScreen Issues <-- please read this if using Windows 10.
Locked
User avatar
sseguin
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 130
Joined: Sat Apr 10, 2010 2:24 am
Contact:

Prevent users from creating higher group users than themselves

Post by sseguin » Fri May 27, 2016 9:14 pm

Hello. I have a site with several user groups defined

Admin Level 1
-Admin Level 2
--Admin Level 3

Ideally I want level 1 users to not be able to use the user manager to either upgrade themselves or create new users in groups 2 or 3. Same for level 2 users, prevent level 3 editing or creation.

Any way to accomplish this?

Thank you.
https://www.SlopeEdge.ca - Dedicated to getting you up close and personal with skiing and adventure
https://www.RailFans.ca - Canada's Public Transit Rail Enthusiasts

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Prevent users from creating higher group users than themselves

Post by sozzled » Fri May 27, 2016 10:34 pm

This may not be very helpful, but I'm not sure how you can do that or, perhaps equally importantly, whether you should. It really boils down to the question of who can access the Joomla backend and what they can do when they get there. The question is also open for discussion about how many people should have administrator rights.

I'm guessing that you could probably define levels of access to the User Manager with Joomla ACLs—I wouldn't want to lead you in the wrong direction—but I suspect it's fairly complicated. Perhaps, by the time someone replies to this topic, you will get the answer but you may decide that, in the long run, it isn't worth the effort. I would suggest that you could look at the "problem" laterally: ask yourself, do I really need all of these administrators getting into the backend and doing things that I don't want them to be able to do?

User avatar
sseguin
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 130
Joined: Sat Apr 10, 2010 2:24 am
Contact:

Re: Prevent users from creating higher group users than themselves

Post by sseguin » Fri May 27, 2016 11:12 pm

Hi, unfortunately there are a few groups of people on our staff that do require Administrator Back-end access to maintain the site, as we post 50-70 pieces minimum per day. ACL has already been set for everything else and restricted to what they require, however this is the final step to really be through in the setup.
https://www.SlopeEdge.ca - Dedicated to getting you up close and personal with skiing and adventure
https://www.RailFans.ca - Canada's Public Transit Rail Enthusiasts

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Prevent users from creating higher group users than themselves

Post by sozzled » Fri May 27, 2016 11:19 pm

True. Maybe you could restrict their backend access to Manager? Manager (instead of Administrator) will still give them backend access but they would limited to creating/editing article content. Just a suggestion.

User avatar
sseguin
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 130
Joined: Sat Apr 10, 2010 2:24 am
Contact:

Re: Prevent users from creating higher group users than themselves

Post by sseguin » Sat May 28, 2016 1:18 am

They already have ACL setup for the access they need, but I just need to restrict them to which user groups they can create. Please refer to the original post at the top.
https://www.SlopeEdge.ca - Dedicated to getting you up close and personal with skiing and adventure
https://www.RailFans.ca - Canada's Public Transit Rail Enthusiasts

sozzled
I've been banned!
Posts: 13639
Joined: Sun Jul 05, 2009 3:30 am
Location: Canberra, Australia

Re: Prevent users from creating higher group users than themselves

Post by sozzled » Sat May 28, 2016 1:37 am

sseguin wrote:Please refer to the original post at the top.
Sorry. OK ... I can't help you with that. Good luck :)

User avatar
sseguin
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 130
Joined: Sat Apr 10, 2010 2:24 am
Contact:

Re: Prevent users from creating higher group users than themselves

Post by sseguin » Sat May 28, 2016 1:45 am

No worries, thank you for your comments and suggestions though.
https://www.SlopeEdge.ca - Dedicated to getting you up close and personal with skiing and adventure
https://www.RailFans.ca - Canada's Public Transit Rail Enthusiasts

sovainfo
Joomla! Exemplar
Joomla! Exemplar
Posts: 8808
Joined: Sat Oct 01, 2011 7:06 pm

Re: Prevent users from creating higher group users than themselves

Post by sovainfo » Wed Jun 22, 2016 9:54 am

Suggest to check Community or Membership extensions, they normally extend the account management of core Joomla. It is a all or nothing situation for account management in Joomla core. Unless you use external account management (LDAP etc).
Issue with migrating? Include logs/joomla_update.php in your report!
Blank screen? Verify pagesource for HTML code (javascript error)
Installation failing on populating database? Install with set_time_limit(0)
Document your customizations!

User avatar
sseguin
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 130
Joined: Sat Apr 10, 2010 2:24 am
Contact:

Re: Prevent users from creating higher group users than themselves

Post by sseguin » Fri Mar 24, 2017 1:45 pm

Has there been any newer way of accomplishing this discovered?
https://www.SlopeEdge.ca - Dedicated to getting you up close and personal with skiing and adventure
https://www.RailFans.ca - Canada's Public Transit Rail Enthusiasts


Locked

Return to “Access Control List (ACL) in Joomla! 3.x”