[fixed] Banned users are still able to receive PMs

[bira]

Hi,

I have a usergroup called Banned Users. In the usergroup permissions, all permissions are set to NO (see screen capture below). And yet, a regular (not an admin or a moderator) user can send a Banner User a PM, and the Banned User receives an e-mail notification about it (but he cannot read the PM). Furthermore, the sender gets no message that the recipient cannot receive or read these PMs.

How to fix?

Thanks,

bira

http://www.atlasf1.com/personal/bira/nopm.gif

[bira]

Hello? :confused:

[eva2000]

same happened with me too

[DVD Plaza]

That could cause some heat. I once had a banned user send me some pretty heavy abuse once, because he wasn't happy he received our newsletter despite being banned. Imagine being told you have a private message you can't even get to, ouch! :)

[bira]

I'm very disappointed to see the lack of response from any of the vB dev/support team. With the team now having several members, I would have expected to get something in response. And, this is the second (out of about 3) thread I posted here recently, inquiring about what is seemingly a bug, that gets completely ignored.

Either I'm on the admins' ignorelist, or support has become a bit loose since the latest release :o

[bira]

Ed you know full well I don't expect you to FIX it in one day. But a response such as "known" or "we'll look into it" or "it's not a bug" or anything of the sort would be good, rather than see the thread sink into page 2,3 or 4 without being noticed (or rather, without me knowing if it was noticed).

[Wayne Luke]

Is it a bug or an oversight????

The ability to send PM's is controlled on a USERGROUP basis but the ability to receive PM's is controlled on a USER basis.

Not a fix but a worthwhile workaround....

update user set receivepm=0 where usergroupid=XX


Of course XX should be replaced with your usergroup...

Of course I am sure the developers can find a fix but a banned user group isn't really standard so it might be a little tricky.

[bira]

wluke, interesting distinction you make between sending permissions and receiving permissions - I hadn't thought of that before.

Nevertheless, I do think it's a 'bug' in the sense that the feature is not functioning as it should (rather than the script). The permissions state "Can use Private Messaging". To me, usage of PMs is both receiving and sending. Furthermore, surely you would agree with me that if you set a usergroup's permission to 'NO' on that item, then it kind of nullifies the intention if that usergroup can receive PMs but not read them :D

Anyway, thanks for the fix but the downside of using it is that I'll have to remember to revert it (or tell the user to revert it in his profile) once he's unbanned.

[DVD Plaza]

I agree - when it comes to security NO means exactly NO, not half no half yes.

Members I've banned have generally always been extreme cases(normally can talk things through with people), so they aren't people I'd ever stuff being sent to.

[bira]

Fixed? How?

[Steve_S]

bira,

Thanks for raising this issue. I haden't noticed :)

I agree. When I say Banned User group I need absolute and total control. Waynes thought will help (thanks) but then that means Iv'e got to take a trip to the Edit user screen. I can live with this untill a fix arrives. On the list please :)

Perhaps another solution to implement as time permits is to simply hard code a "Banned" user group into the next rev and in this group let me set recieve and send PM to NO. I think it's safe to say that with this group of vB users and the volume it would be a nice addition.

Whatever is easier for the coders :)

[Mike Sullivan]

Originally posted by bira
Fixed? How? Can't send to banned users at all.