who's online sometimes shows that a super moderator is accessing the admin cp

[edgeless]

While I'm convinced that my SMods don't have access to the Admin CP (only to the Moderator CP), occasionally the Who's Online display shows one of them at "Admin Control Panel" under the location column. Is this normal? And how is it possible? The control panel log doesn't indicate that these SMods have been anywhere where they were not supposed to be. Is this merely a glitch that I can ignore?

[In Omnibus]

It's normal. ModCP permissions are assigned in the Admin Control Panel. Even if No AdminCP permissions are assigned logging into ModCP link http://yoursite.com/modcp/index.php will cause the Super Moderator to see the Moderation menu in the AdminCP.

Chances are good when you're seeing this they are moderating something.

[edgeless]

Thanks for the feedback, ProSportsForums. So here's what I gather from your explanation... Since the mechanism that controls the permissions for access to the Mod CP is in fact part of the Admin CP, when those permissions are called upon by someone accessing the Mod CP, the "Admin Control Panel" description will show up as their current location? I hope I've interpreted that correctly.

I appreciate your response very much!

[MarkFL]

When I access the ModCP, then check my location in WOL, I see "Moderator Control Panel" as my location.

When you see a SuperMod in the AdminCP in WOL, do they show they are getting an error message?

[edgeless]

When you see a SuperMod in the AdminCP in WOL, do they show they are getting an error message?No, there is no error message indicator/icon shown. It looks as if they have accessed the Admin CP, simply displaying "Admin Control Panel". But the displayed location changes soon after to "Moderator Control Panel".

[Stratis]

"Moderator Control Panel" he will see in all situations, except when Smod search for a member
and panel with user settings open, than it will show "Admins control panel"

Any way he must check in usergroup if smods are given privileges to admin panel.
If he gets error as you say Mark, probably he knows the url, and cannot login any how.
But how many times he would do that, he knows that he does not have action there. :D

EDIT: My answer came up without reading @edeless answer#5, I was answering that time

[edgeless]

OK Stratis... so it is normal for "Admin Control Panel" to be displayed on WOL for a super moderator who does not have admin cp privileges. But *only* when that super moderator is performing a user search from the CP? Is this correct?

Thanks

[Stratis]

Yes exactly, at least to my forum and settings.
That's what I see to my Smods, and in my test user I have for these situations, something you must have to.
Checked and in my test forum, same thing.

[edgeless]

Thank you very much, Stratis! That solves the mystery. I have a test user as well... I should have tested it myself ;)

[MarkFL]

"Moderator Control Panel" he will see in all situations, except when Smod search for a member
and panel with user settings open, than it will show "Admins control panel"

Any way he must check in usergroup if smods are given privileges to admin panel.
If he gets error as you say Mark, probably he knows the url, and cannot login any how.
But how many times he would do that, he knows that he does not have action there. :D

EDIT: My answer came up without reading @edeless answer#5, I was answering that time

That's a nice bit of detective work there, Stratis! :cool:

[Stratis]

We have a thread in here these days that is familiar to this. Any way, can we trust our smods or not? Actually this is difficult many times, and it is a matter of luck to have good people round of our site. One step i make is that we swap our telephone numbers and if we are near we meet to know each other. i rather look him in the eyes first ;)

[edgeless]

Good suggestions, Stratis! And another thing that may be helpful is to set SMod permissions so they can only soft-delete, but not permanently remove content. While doing so won't solve all potential problems, it may help preclude the need to restore a backup of the database if/when a Mod decides to run amuck.