Restrict Viewing of Show Groups [Archive]

Dagothar

06-04-2008, 10:38 AM

Greetings!

1. I would like to restrict viewing (access) of Show Groups [.../forum/roster.php] to certain usergroups; especially blocking it from view by Unregistered / Not Logged In

2. I can restrict access/viewing the MemberList [.../forum/memberlist.php] with
AdminCP: Usergroup: [usergroupname]: General Permissions: Can View Member Info: No

3. But anyone can go to my site url, type /forum/roster.php and see any group and forumname for any Usergroup where
AdminCP: Usergroup: [usergroupname]: Usergroup Options: Viewable on Show Groups: Yes
(They can't burrow further into the users' profile info with Can View Member Info set to no, at least.)

4. Of course, I can reset that to No, but then my forum members can't see a nice list of forum leaders, the way the Show Groups was apparently intended.

5. Help!

(BTW, I did search for this, but couldn't find where it's been addressed before. Thanks in advance!)

Dagothar

06-04-2008, 05:28 PM

What is roster.php?

roster.php is not a default vbulletin file

you can edit your file to check for viewers permissions ...

Hmm. Here is the part of my AdminCP: Usergroup Manager : usergroup 1 screen:
************************************************** **********
Usergroup Options Viewable on Show Groups (Sets whether or not to show members of this group on the 'View Forum Leaders (http://the-sentinels.net/forum/showgroups.php)' page) Yes No
https://vborg.vbsupport.ru/ (http://the-sentinels.net/forum/admincp/usergroup.php?do=edit&usergroupid=22#) Birthdays Viewable (Sets whether or not the birthdays of users in this group are displayed on the calendar and forum home pages) Yes No
https://vborg.vbsupport.ru/ (http://the-sentinels.net/forum/admincp/usergroup.php?do=edit&usergroupid=22#) Viewable on the Memberlist (Sets whether or not users in this group will appear on the member list) Yes No
https://vborg.vbsupport.ru/ (http://the-sentinels.net/forum/admincp/usergroup.php?do=edit&usergroupid=22#) Allow Users to have Member Groups (Sets whether or not permissions from the user's member (secondary) user group memberships are inherited or not) Yes No
https://vborg.vbsupport.ru/ (http://the-sentinels.net/forum/admincp/usergroup.php?do=edit&usergroupid=22#) This Usergroup is not a 'Banned' Group (Setting this to no will cause the group to be treated as a banned group, this will prevent the sending of email notifications, show a banned error message on the permission error pages and other unspecified behaviors.) Yes No
https://vborg.vbsupport.ru/ (http://the-sentinels.net/forum/admincp/usergroup.php?do=edit&usergroupid=22#)
***********************************************
Interesting. It appears I have a roster.php that produces identical output to showgroups.php, which is what is used when I click the View Forum Leaders (http://the-sentinels.net/forum/showgroups.php) link above in my AdminCP.

I'll delete/disable roster.php. There is a link on my navbar labeled Roster, that calls that php file.

But, I see I have an identical problem with showgroups.php: I would like to restrict viewing (access) of Show Groups [.../forum/showgroups.php] to certain usergroups; especially blocking it from view by Unregistered / Not Logged In without preventing my authorized users from seeing it.

I have a steep learning curve. :P