Suggestion: change to the way ACP Restrictions work

[Peter F.]

Currently ACP restrictions work on a "whitelist" basis, that is admins have to specify which services the other admins are allowed to use. My suggestion is to give Admins (who have the necessary permissions naturally) to create "blacklist" style permissions instead. In some cases there are Admins who I would like to say "right you have permission to do xyz" for which the current system works perfectly, however there are other Admins that I would prefer to be able to say "you are not allowed do xyz but you can do everything else".

For example I could designate one Admin as only being able to access the Members tab of the ACP, while another Admin I wish to have access to everything but the members tab and the SQL Toolbox. The first Admin only takes a couple of clicks to setup permissions for the members tab whereas the second Admin requires me go through a very lengthy number of clicks to give him permission for everything else, and each time I add a new application that supports admin restrictions I have to edit the second Admins ACP permissions to allow him to use said application.


This could be achieved by adding in a dropdown box for the Admin who is creating or editing the current permissions set to choose that it either be a "whitelist" (as it is now) or a "blacklist" permissions set.

[SkimPappa]

I like the ability to control each aspect, but its an ugly screen for sure! And several options that are hard to decide exactly what they do.
I would certainly like this to be cleaned up and more stream lined.

Having a default click to "manage members" (without ability to remove original admin) and another for "manage forums"

[Peter F.]

I like the ability to control each aspect, but its an ugly screen for sure! And several options that are hard to decide exactly what they do.

I would certainly like this to be cleaned up and more stream lined.

Having a default click to "manage members" (without ability to remove original admin) and another for "manage forums"

I'm not advocating that the ability to control each aspect is removed, nor am I saying anything about how the thing looks (sure its a little bit ugly but meh. What I am advocating is the addition of the ability to blacklist certain sections while leaving them access to everywhere else in the ACP. Under my proposal those who wish to continue using the ACP Perms as they are presently would not need to change anything.

[SkimPappa]

I want to have the same ability, to uncheck a few options instead of check all but a couple. :) Maybe just a select all button?
But, I think this could be made a little bit easier besides an all or nothing approach. Any improvements would be great. Nice topic.

[Wolfie]

I'm not in favor of a blacklist option, as I think it's nice to click the options you want to enable. Makes more sense and is less confusing to whitelist it.


However, I think it would be nice if there was a "Check / Uncheck All" links at the bottom, so you could click and have all the work done for you.


ALSO, and this is a big one, if it could be set to combine permissions as opposed to combine restrictions. As it is now, if you set up a restriction set to allow member control on one group, then on another group allow forum control, then if you add both of those groups to one member, they are denied access to the member control and the forum control.

With combining permissions, if you add both groups to a member, then they would get access to member control AND forum control.