How do I Limit some Admin CP options to SUPER ADMIN?

[Quarterbore]

I have a coadmin that helps me run the forum spart of my site but there are a number of things that also show up in the AdminCP that he just doesn't need access to as obviously a few clicks here or there can cause me real problems...

How can I use the SUPER ADMIN in a conditional to hide some links off the left in the AdminCP... Then, how would I edit some of the more critical files to lock them down as well?

Thanks!

[brvheart]

1. dont make them a superadmin, you can have an admin that is not a superadmin
2. After making them an admin you choose via the admincp to restrict what you want them to be able to see etc...do this by going to your admincp. choose uergroups, at the bottom choose "Administrator Permissions" then choose the admin that you want to limit.

[Quarterbore]

Correct...

My issue is with some of the custom add-ons....

Photopost Links
SR Classifieds
Photopost
etc....

WIth those I need to hand code it with a conditional ...

<If superadmin> .... then show code.... </if>

I just don't know how to verify if a user is a superadmin...

[akanevsky]

The definition of superadmin: An admin with a superior and unlimited power.

As for limiting links to superadmins only, if I were you I'd ask them authors of those hacks to implements some sort of permissions...

[Quarterbore]

OK, from insite adminpermissions.php I see the following code:

if (!in_array($vbulletin->userinfo['userid'], preg_split('#\s*,\s*#s', $vbulletin->config['SpecialUsers']['superadministrators'], -1, PREG_SPLIT_NO_EMPTY)))
{
	print_stop_message('sorry_you_are_not_allowed_to_edit_admin_permissions');
}

So, if I want to make this work in reverse, can I remove the ! as follows?

if (in_array($vbulletin->userinfo['userid'], preg_split('#\s*,\s*#s', $vbulletin->config['SpecialUsers']['superadministrators'], -1, PREG_SPLIT_NO_EMPTY)))
{
	Option belongs in here;
}

EDIT - OK, the first code locks non-superadmins out of a file... I just want to also hide the admin option.... where are the option sin the left of teh AdminCP stored and how can I add a conditional to them in a similar way to the second code above?

OK, I think I found the code.... not that I know just how to use it yet?

It looks to me like the permissions for the navigation in the AdminCp is defined in the /includes/xml/ files...

For example:

<navgroup phrase="sr_classifieds" permissions="canadminusers" displayorder="15">


I see similar files for things like vBa, my classifieds, my links directory, etc....

I went into the adminpermissions.php file and I am still quite clueless how this all works....

I would really like to know how I can add new areas under the "Admin Permssions" area such as (Can Administer Classifieds, Can Administer Links, Can Administer vBAdvanced) then use those permissions as assignd to the Admin group to selectively show these CP options....

Perhaps this is too complicated for what I am going to gain from doing this...

[bradyb]

Wouldn't you just assign yourself as superadmin, add your userid to the superadmin and undeletable users in the config.php then add anohter administrator, then edit the permissions to not be able to access certain features like usergroups, options etc??

[Quarterbore]

Originally Posted by bradyb

Wouldn't you just assign yourself as superadmin, add your userid to the superadmin and undeletable users in the config.php then add anohter administrator, then edit the permissions to not be able to access certain features like usergroups, options etc??

The problem is that not all additions you will add to your site are controled by Admin permissions settings... So, on my board I have two accounts that I have set up fro myself... both are SuperAdmins...

The Primary is the one I post From 99% of the time
The Secondary is a backup in case I get hacked
I have a Co-Admin but he is not a coder and one wrong click could cause me a nightmare

So, I still need to figure this out one of these days...

I know what he means. Example is giving and admin the ability to edit a user. However I don't them to have access to the email list / send functions. Can it be broken out or hidden?