why moderators can edit profiles ?
Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=19677
Printed Date: 11 April 2026 at 10:39pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: why moderators can edit profiles ?
Posted By: moti
Subject: why moderators can edit profiles ?
Date Posted: 03 May 2006 at 12:41am
|
I think this is a security risk or maybe a bug
because I have about 15 moderators in my forum they have access to edit any profiles,
I have edited files " member_profile , register " to prevent them to edit profiles,
If you think this is not a bug so it should be selectable via admin area, so we can select " moderators have permission to edit profiles or no "
 |
Replies:
Posted By: WebWiz-Bruce
Date Posted: 03 May 2006 at 10:08am
|
This is NOT a bug and has always been like this. The reason for this is that you should only give people you really trust to run your board moderator permissions, this way they take the burden of the forum admin. Moderators can edit certain items on users profiles (they can not edit the admin profile), so for example if a user comes along a starts spamming the forum and the forum admin isn't around one of the moderators can suspend the users account. Although moderators can edit some users profiles, they don't have permissions to do things like deleting users, changing the users group, etc. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: wistex
Date Posted: 03 May 2006 at 11:55am
|
You should think of Moderators as mini-Administrators. They help administer the website except they don't have access to the forum configuration and setup.
------------- http://www.wistex.com" rel="nofollow - WisTex Solutions http://www.caribbeanchoice.com/forums" rel="nofollow - CaribbeanChoice Forums |
Posted By: moti
Date Posted: 03 May 2006 at 2:05pm
|
thanks borg
but I think this is better that moderators just can suspent users not editing anything
meanwhile, moderators can easily edit users profiles in Admin Group, ( not main admin ) I think this is a security risk
|
Posted By: WebWiz-Bruce
Date Posted: 04 May 2006 at 12:50pm
|
You should only ever have 1 forum admin, the built in admin account. For security reasons it is recommended that you NEVER create any other admin accounts, unless you really have to. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: AnaMaria
Date Posted: 04 May 2006 at 8:44pm
| Is there a way to suspend treir rights, I mean the moderators rights? |
Posted By: WebWiz-Bruce
Date Posted: 05 May 2006 at 10:16am
|
Yes, by not making the person or group a moderator
------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: AnaMaria
Date Posted: 05 May 2006 at 1:00pm
hehe, your right, if you dont have moderators, you wont have to give them rights 
|
Posted By: get_up
Date Posted: 05 May 2006 at 10:00pm
|
hmm i think that some moderator groups should have edit right and some not .. cause my forum have 1000 members and i have 5 friends like moderators but also i have 6 others part moderators that i dont know very well..so they are looking just some parts of forum not all of it ..why they need to edit profiles?? |
Posted By: WebWiz-Bruce
Date Posted: 06 May 2006 at 10:00am
|
If you do a search you will see I have explained this is full quite a number of times. The way moderators and their permissions work has been the same now for over 5 years, with over 300,000 downloads, without it ever being an issue before. The simplest solution is if you want the moderator system to work differently to the standard way is that you will need to modify the code. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: Duby
Date Posted: 16 May 2006 at 12:30am
Could you please write what files I need to edit to disable moderators permission to edit profiles? Only member_profile and register?
Thank you! ------------- Duby |
-boRg- wrote:Posted By: WebWiz-Bruce
Date Posted: 16 May 2006 at 12:26pm
|
I have built into version 8.02 that you can edit the setup_options.asp file and disable moderators from being able to edit user profiles. I am in the middle of moving office at the moment, but things are going quite smoothly, at the moment, so I hope to have 8.02 released later this week or early next week. ------------- https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting |
Posted By: megetron
Date Posted: 16 May 2006 at 6:54pm
| GOOD IDEA! |