Kunena 7.0.4 Released

The Kunena team has announce the arrival of Kunena 7.0.4 [K 7.0.4] in stable which is now available for download as a native Joomla extension for J! 5.4.x/6.0.x. This version addresses most of the issues that were discovered in K 6.2 / K 6.3 / K 6.4 and issues discovered during the last development stages of K 7.0

Topics must relate to a currently supported version of Kunena. If you are unsure what is the current supported version of Kunena, please go to the download page.

If you are having problems then, for your own benefit, it would save us all a lot of time if you would kindly post your configuration report when you ask for help from this forum. If you do not post your configuration report we will not ask you for it but you will probably not get your problem solved, either.

Question Rank changed, but how?

More
7 years 2 months ago #208871 by tcn
Replied by tcn on topic Rank changed, but how?
I just checked the User Activity Log in Joomla. The ACL changes were applied the day before I installed the update. I didn't notice the change of rank until a couple of days after the update. So, the ACL modification is definitely another candidate for the changed rank.

Please Log in or Create an account to join the conversation.

More
7 years 2 months ago - 7 years 2 months ago #208910 by rich
Replied by rich on topic Rank changed, but how?

Thank you very much for the overview. I would say there's a bug in the latest version then. The user in question is a normal user1 in Joomla. In Kunena he's a Global Moderator. So, his rank image should be that of a Moderator:

Yes correct, unless you have created an own Kunena rank for this user.

Unless, there's something else that needs to be taken into consideration. Does Kunena look at all at access levels?

Joomla user groups such as Author, Editor ect.. are for Kunena only normal registered users without extra rights. Only Admins and Super Users have more rights.

I recently tried to configure Joomla such that Global Moderators can access the Kunena configuration logging in to the backend without them getting access to other settings than Kunena. That's a desire, because not everything can be configured from the frontend, e.g. boards.

I did not succeed, so far. But I did change some access levels for the Joomla group our Global Moderators are member of:

Kunena Forum | Access Administration Interface | Allowed
Global Configuration | Administrator Login | Allowed

Now it's all clear. This members are admins now.
In the frontend are the differences between Admins and Global Moderators minmimal, such as a Moderator can't ban an another Moderator but a Admin can do it.
But in the backend you have a security problem now. All the users of this group have the possibility, to delete permanently all members from your web page.
Please see this doc and scroll down to the Info bar.
docs.kunena.org/en/faq/admins-only-for-kunena

Important! Always create a backup before you make any changes to your website!
Last edit: 7 years 2 months ago by rich.
The following user(s) said Thank You: tcn

Please Log in or Create an account to join the conversation.

More
7 years 2 months ago #208935 by tcn
Replied by tcn on topic Rank changed, but how?

Yes correct, unless you have created an own Kunena rank for this user.

No, I have not. But I infer from your answer that manually assigned ranks in the backend take precedence over automatically calculated ranks based on permissions or post count.

This members are admins now.

So, Kunena does look at the assigned ACLs then? Not a problem, just good to know.

But in the backend you have a security problem now. All the users of this group have the possibility, to delete permanently all members from your web page.

First of all, I wouldn't call it a security problem. It's a matter of trust. Or, to quote sudo:

With great power comes great responsibility.

Second, as I mentioned, the users are not yet able to see anything in the backend. Obviously, I have missed something setting it up. I will go through the documentation and try to figure out what. Thanks for pointing me in the right direction.

I would also like to thank you for you support once again. I'm glad this turned out to be a red herring and not a bug or, worse, a security incident.

Please Log in or Create an account to join the conversation.

More
7 years 2 months ago #208937 by tcn
Replied by tcn on topic Rank changed, but how?
All done! :woohoo:

Our two global mods now have access to the Kunena backend. I actually came across the documentation page you pointed me to, before. It just didn't register as being related to what I was trying to achieve. Maybe renaming the document to something like "Access to Joomla backend only for Kunena component for forum administrators" might help. I know it's a mouth full...

Anyway, I'm glad I can put this behind me. B)

Please Log in or Create an account to join the conversation.

Time to create page: 0.230 seconds