3. Roles

RBAC configuration

Podium initializes the authManager component with the full structure of permissions and roles as the default option.
In case you are already using this component set rbacComponent to the ID of your component (usually it's authManager) in the module's configuration. This way Podium can add new definitions there and not interfere with the main app.

Only DbManager version of authManager is supported.

Roles

There are three roles available.

Members

This is the default role for registered users.

• can read and write posts,
• can create new thread,
• can edit and delete their own posts,
• can edit and delete their own polls,
• can browse all forums and categories,
• can vote in the polls,
• can modify their profile,
• can send messages to other users,
• can view other Members,
• can ignore and befriend other users,
• can upvote and downvote posts,
• can report posts.

Moderators

Member can be promoted to Moderator by Administrator (and demoted as well).

• can do everything Member can do.

Administrator can assign Moderator to a forum. For this assigned forum Moderator:

• can edit, move, and delete all posts,
• can edit and delete all polls,
• can pin, lock, move, and delete all threads.

Administrator

Administrator is Podium owner, manager and keeper.

• can do everything Member can do,
• can do everything Moderator can do for all forums.

In addition, Administrator:

• can promote, demote, ban and delete users,
• can create new forums and categories,
• can edit and delete forums and categories,
• can change Podium settings.

Guests

Users that are not signed in are called Guests.

• can read posts in forums and categories visible for Guests,
• can view Members (this can be changed in settings).