Working with Permissions

MircryptionBoard has a very flexible system for specifying permissions.

Each section of the newsboard can have an independent set of permissions, which allows you to isolate sections of the board which is only accessible by certain users, and to mark certain sections as read-only.

Setting permissions is done by specifying a prefix and then a permission string.

A prefix indicates who the permission string applies to.  It can be of the form:

 Perm_Default                -        permission applies to everyone by default, unless overwridden by a password

 Perm_Pass:XXXX        -        permission applies to people with the password XXXX.

A permission string is the concatenation of characters from the following set:

 R                        -        permission to read items and sections

 A                        -        permission to add sections and items

 D                        -        permission to delete sections and items

 S                        -        permission to set (and read) variables.

To see if someone has permission to perform an operation in a specific section, the news server will began traversing up the hierarchy from the section until it finds a permission assignment.  That is, if an explicit permission string for a section is not found, the news server will check for a permission assignment at the root of the tree.

Never allow S permission by default, always use a password, as S permission allows the user to actually change the Password for the board, and modify all board settings.

Tip:

You can create sections that only certain members of a channel know about and can read by setting their default permission to blank, so that only users with the proper admin password can see them.  When a section has a blank default permission, that section will not appear at all on any section list for a user without the proper password.