What the hell is going on???????

This is so weird. I had someone join my forum today as Ranger Registeel.

He told me he could see the mod only forum. I logged out and couldn't see it and then logged in on a test account and couldn't see it. Asked people, and they couldn't see it.

I tried to figure it out, but he was same as any other user.....there was nothing I could do.

I was planning on making him a mod, so I said, screw this, and made him a mod in certain forums, so now it doesn't matter if he sees it....right?

Well, now he just closed a thread in a forum he doesn't mod.......WTF?

He has like super powers that shouldn't be there. He even gives me screen shots for proof it's happening. But he doesnt have a mod panel.

Very strange. I have no answer really except maybe there was a DB corruption of sort unusual sort.

The only true way to troubleshoot this RC is to either log in as this user or create a test account with exactly the same access and log in using that. Then you can see what might be happening and correct the issue.

It sounds to me as though it's either what Joey suggested, or a permissions issue. Good luck.

Thanks guys. I already did the test account part...that worked. He said he is using IE 7.0 or something, can that have anything to do with it?

Alright I have one more person to ask until I somehow figure it out myself of forget it.

Thanks

Go to Admin CP | Users | Search for users | {member name} exact name | View permissions to see what he can do currently and where (in which forums).

Then check that he is not in some custom group. Then check the permisions for any and ALL groups of which he is a member.

Check Forums and Moderators | Forum Permissions | Permissions Quick Editor for permisions for specific usergroups vs. specific forums.

If he is a moderator, check Forums and Moderators | Show all moderators and you can edit specific permissions for each moderator there.

I got it!!

Okay, so I tried to make a public user group that anyone can join for no reason except when you view there profile it will say they're a member of it. Well, I went in on my test account and joined this group....guess what?, I got the permissions he had. Just solved the mystery, time to delete this stupid group.

(Thanks minstrel, I was doing all that, and then while I was doing I thought of trying what I just did, and what do you know, it was the reason behind his crazy powers.)

I had that problem with the imported "moderator" group created during the import from SMF - it turned out anyone could join the group and obtain full admin powers. Pretty scary. I was alerted to that the day after the import and deleted the group the minute I found out.

Don't worry about it - done the same as well. :)

The point to remember is that when you create custom user groups, beware to check the forums, as they seem to default to "view all boards" rather than inherit any permissions structure you've already set. :)

The point to remember is that when you create custom user groups, beware to check the forums, as they seem to default to "view all boards" rather than inherit any permissions structure you've already set.
Yes, which is bizarre and worrisome, to say the least. To be honest, I didn't check to see whether this was a known issue or reported bug in vBulletin. I was too busy just making sure it got fixed ASAP.

I don't think it's a bug - simply that vbulletin starts with "Registered members" having access to all forums, and then if you create private areas, you have to disallow the usergroup access. So when you set up new usergroups, they automatically start off with full permissions, and you have to cut them down.

Pants - just remembered - I just set up a banned usergroup on a forum, but didn't check the permissions. Back soon!!

EDIT: All's fine - I based the usergroup permissions on the "Registered" group, so looks okay. :)