Serendipity Forums

Hi there,

I have activated the "Guestbook (guest)" - plugin at my Serendipity blog.
Here is the link: www.rene-marquardt.eu

I want my page visitors to register at my blog. Then they are allowed to post comments.
I gave their group, the editor group, the minimum of rights... so that they can't manipulate my blog.

But they have the right to delete guestbook entries ?!
And I can't find any place where I can disable their right to delete guestbook entries..

Does anybody know how I can fix it?

Hi!

Yes, the guestbook plugin does not have "permissions". It just thinks that every registered author on your blog can administrate it.

So somebody needs to code that plugin so that either only real admins can remove the entries (that would not be too hard and can easily be patched with a "if ($serendipity['userlevel'] >= USERLEVEL_ADMIN)" PHP check, or that the plugin gets full permission support...

Best regards,
Garvin

Thank you for your help.

Unfortunately I never learned php. I have to wait until somebody has coded the patch.

Hi!

I've committed this in 1.38 of the plugin. You should be able to fetch it from spartacus.s9y.org in a day or so. This only allows to delete entries to the Admin user!

HTH,
Garvin

Nice ! Thank you very much.

Thanks a million!

I've been wanting to learn more about plugins and try to figure out a way to add something to the guestbook to help prevent spam but I don't know enough about programming to get started good. This does help in getting rid of it anyway.