User rights issue

Reply

lloydp Posted: Sat, Mar 10 2007 6:32 AM

rated by 0 users

I'm having a problem with  registered users being able to select  blogs other than their own to manage.

For example I have set up a test user with the following roles:

Everyone (by default)
Owners
Registered Users (by default)

However, when that user goes in to the dashboard a menu appears top right with 'select blog to manage' and from there they can do what they like!!

I have a completely standard 2.1 free installation, just installed, and I haven't messed about with any code.

Am I missing something please?
 

Reply

jeffesp replied on Mon, Mar 12 2007 9:22 AM

rated by 0 users

When you say: 

lloydp:

For example I have set up a test user with the following roles:

Everyone (by default)
Owners
Registered Users (by default)

Did you assign those roles to the user, or to the blog?  I think that you might be missing the fact that blogs also have roles controlling the access to them.  What you want is a situation where each blog is only able to be adminstered by it's owner.  I don't think that the user needs to be in the Owners role for that to be the case.  I think if you just create a user, and then make sure that the Global Permissions on the blogs do not allow users to edit each other's blogs you will be okay.