Note: We are moving the topics of this forum and it will be deleted at some point
Publish your own request for comments/change or patches for the next version of phpBB. Discuss the contributions and proposals of others. Upcoming releases are 3.2/Rhea and 3.3.
It was brought up here that some of the permissions are possibly a bit too over-the-top and aren't really necessary.
So we should discuss some of the permissions that are not really needed.
The one highlighted at the link I provided was 'u_pm_delete'.
I'll start a branch for this and remove permissions as they are decided unnecessary.
Removed:
u_pm_delete - "Can remove private messages from own folder" - First of all, a user can only view his/her own folder, so why the specific language? Anyway, It makes sense to restrict creating PMs, but not to restrict deleting them. What happens when a user's folders get full and they cannot delete any PMs?
u_pm_printpm - "Can print private messages" - Really? In what case could printing a PM be malicious? In fact, there's no way to actually prevent printing a PM, only to restrict the viewing of the printer-friendly version.
f_print - "Can print topics" - Same with printing PMs. Why should this be restricted?
f_subscribe - "Can subscribe forum" - Why should users be disallowed to subscribe?
u_pm_emailpm - "Can e-mail private messages" - This permission is currently just taking up extra space; it is not actually used anywhere. NOTE: There is a ticket for adding the functionality for this permission here
u_pm_forward - "Can forward private messages" - "Seems rather silly" NOTE: Instead, forwarding should be attached to u_sendpm ("Can send private messages")
u_pm_download - "Can download files in private messages" - If a message is sent with attachments, the point is for the recipient to be able to download them. Why restrict such behavior?
u_savedrafts - "Can save drafts" - if you can post/send PM, you can save a draft - NOTE: Instead of this permission, it now checks for (f_post || f_reply) in posting.php (u_sendpm || u_pm_reply) in pm-related files.
a_jabber - "Can alter jabber settings" - suggest: merging with a_server - NOTE: Merged, as suggested, with a_server, which covers all communication settings.