Roles and Permission Discrepancies
I'm working on a role for chosen employees to be able to moderate community content and I'm having quite a time doing it.
Problem 1 (major)
The Moderator role gives the user access to EVERYTHING in control. Including the ability to escalate their own privileges to administrator, but that doesn't really matter because they already have everything. The community manager role has the same issue. 😒
Problem 2
Creating a custom role and adding access to Forum Moderation sounds like it will work, but then the user doesn't see the control button when browsing - I can overlook that. Once in the control panel though, clicking topics in Forum overview results in "Page not found." This seems like a bug.
Problem 3 (major)
I also want the moderators to be able to access user profile information. Sounds simple - just add the "Users" option to the custom role. That's fine, but then the user can escalate their own privileges to Admin. 😱 So, that's an obvious no-go.
Problem 4 (minor)
The Appearance section shows up in control, no matter what the role is. Fortunately, its options aren't available. Shouldn't it be hidden?
Now the actual question...
How does everyone do this? I obviously can't allow everyone the equivalent of admin access to our community. I need my moderators to actually have moderation options (edit, trash, tags, etc.) and not be able to change settings and configurations.
Problem 1 (major)
The Moderator role gives the user access to EVERYTHING in control. Including the ability to escalate their own privileges to administrator, but that doesn't really matter because they already have everything. The community manager role has the same issue. 😒
Problem 2
Creating a custom role and adding access to Forum Moderation sounds like it will work, but then the user doesn't see the control button when browsing - I can overlook that. Once in the control panel though, clicking topics in Forum overview results in "Page not found." This seems like a bug.
Problem 3 (major)
I also want the moderators to be able to access user profile information. Sounds simple - just add the "Users" option to the custom role. That's fine, but then the user can escalate their own privileges to Admin. 😱 So, that's an obvious no-go.
Problem 4 (minor)
The Appearance section shows up in control, no matter what the role is. Fortunately, its options aren't available. Shouldn't it be hidden?
Now the actual question...
How does everyone do this? I obviously can't allow everyone the equivalent of admin access to our community. I need my moderators to actually have moderation options (edit, trash, tags, etc.) and not be able to change settings and configurations.