El Dorado

Is there a way to make the forums not as "private" as the private option is now?

In other words, make the posts/forums/events/etc. viewable by anyone, but only allow "new" or "modify" actions to be performed by users who log in?

You could modify the "check_privacy" filter to accomplish something like that. If you make an option for this kind of thing, let me know. That's something with might be nice to have in the core app. I've been intentionally avoiding complex permissions stuff because it's so difficult to meet a lot of use cases - so I thought I'd just start out with two options for the whole site: public and private.

Are the 'new' and 'modify' settings not already only available to users that have logged in?

I know that in my case i needed to make the forums viewable by everyone but only editable by users that were in the 'club' so i just moved the link to register a new user to the admin section and that works for me as a quick hack for now anyway.

I'm sorry - I must have read then a little too early in the morning. That's right - new and modify actions are only available to logged in users.

Thanks Elk,

A "quick Hack" was exactly what I was looking for!

Elk, a quick question

Unfortunately, moving the link to register new user to only appear on the admin page does not prevent people from typing the following into their browser's address bar:

http://www.example.com/users/new

Did you manage this at all?

I changed the following line in app/controllers/users_controller.rb to fix the problem:

Original:

before_filter :require_admin, :only => [:admin, :ban, :remove_ban]

New:

before_filter :require_admin, :only => [:admin, :ban, :remove_ban, :new]

Seems to be working for me.

You should also add :create to that list - otherwise someone could submit the form directly to the create action and make the user that way.

awesome, thanks

Hi, sorry I didnt go into detail in the first post, wasnt sure if that was what you were looking for, but yeah i made those changes to the before_filter with both :new & :create.

And actually you dont even need to move it into the admin section really, would just work with an if admin? check on the setup just now, but it feels a little bit better to have it there in the admin section :)