[solved][Groups] Security bug??? or not.

vsorokin

If I'm not right, delete this thread.
I'm owner of Qt Linux group, I request new forum, but Admins connected "Desktop" forum with my group. And now, I move, edit, delete messages in "Desktop" forum. Is it normal? And yes I Dinosaur, and theoretical can moderate forum, but what will happen if I granted new owner for group who don't be Dino?

Proof image.
!http://habreffect.ru/files/023/3544b3edb/securitybug.png(Security bug)!

giesbert

Hi Vass, You are owner of Linux Group, I am owner of Window sgroup, so I think we are admins of "our" Forum, which is defacto the "QtDevelopement\Desktop". I see the same.

vsorokin

Yes, I thought as much. Well, Hello fellow moderator ;)

stukdev

This is strange, if i normal user create new forum and connect to desktop, he can edit delete or anythink he want on the desktop.
Is this correct?

vsorokin

stuk Not quite, forums connect through request to admins. If admins decide connect existing forum to your group, then yes.

stukdev

Ok, but this sound like 'a workaround to moderate a section of forum without have the necessary level'.

[quote author="Vass" date="1292531788"]stuk Not quite, forums connect through request to admins. If admins decide connect existing forum to your group, then yes.[/quote]

giesbert

But as you are the owner of the group, you are admin of the group. So it makes sense that you are also admin of the groups forum. Up to this it nmakes sense, like in german group, Volker is damin as he created the group.
But in our case, we were connected to an existing forum group, so there we are now also admins.

stukdev

Ok that owner has the power to control all the you want, this is correct!
I only said that for me is strange this 'workaround' because why a group want a forum when at the end the group use the desktop forum? Use the normal desktop forum and don't create a group forum no?

[quote author="Gerolf Reinwardt" date="1292532391"]But as you are the owner of the group, you are admin of the group. So it makes sense that you are also admin of the groups forum. Up to this it nmakes sense, like in german group, Volker is damin as he created the group.
But in our case, we were connected to an existing forum group, so there we are now also admins.[/quote]

giesbert

I think, that is the idea of the Trolls. If you have a group that would fit to a sub forum, conect it to that. If not, create a new forum (like for languages).

mgran

As has been stated here earlier, to connect a forum to a group requires admin action. And as the owner of the group we also trust you with moderating the forum connected to it.

To get help with moderation you can join the Site Moderator group, or hang with us on the IRC channel. If you feel it was a bit too much responsibility you can let us know, I'm sure we can figure something out.

It's based on trust, and if you love Qt - what can possibly go wrong? :)

giesbert

We were just a bit suprised :-)

stukdev

@mariusg: Ok, if is your choice i accept this.

vsorokin

mariusg Thanks you for trust for us. I am flattered.