cotonti.com : Hidden Groups Issue https://www.cotonti.com Son konu mesajları Cotonti en Wed, 04 Feb 2026 23:43:42 -0000 GHengeveld As admin I know Cotonti.com uses hidden groups (although not actively), so there's your user. It's also a way to set rights for a specific user, without publicly putting him inside a group (he's the only member of a hidden group).

In fact it's not a problem making it configurable, because it's only a matter of enabling/disabling pieces of code. There's no need to rewrite parts just to get a different setting. The three levels add up to eachother.

Added 13 days later:

I've just committed a changeset which moves the hidden groups functionality to a plugin. Right now there's nothing new yet, but this clears the way for adding configuration options. See ticket 559 for details.

Added 12 hours 39 minutes later:

Changeset 1484 adds three hiding modes:

1. Hide only groups (original method)
2. Hide groups and members whose maingroup is hidden (now the default method)
3. Hide groups and members which have any of their subgroups hidden

Note that members are only hidden in the userlist. Their activity on the site is still visible.
It's possible to allow groups other than administrators to see hidden groups. Authentication level '1' is used for that.]]>
Sal, 19 Eki 2010 16:36:06 -0000
Kort Sal, 19 Eki 2010 02:07:09 -0000 GHengeveld
- Hide group name only (current method)
- Hide users in userlist when their main group is hidden (should be default)
- Hide users in userlist when any of their subgroups is hidden

What goes for userlist also goes for whosonline plugin.

Now the question is to make this configurable site-wide, or per group. Obviously the 2nd option will require an extra db column in cot_groups and a lot more code too. I think site-wide will be flexible enough.

I think we should take out the current implementation of hidden groups and rewrite it in a plugin.

Added 8 minutes later:

Ok, created a ticket for this: http://trac.cotonti.com/ticket/559]]>
Pzt, 18 Eki 2010 20:08:04 -0000
esclkm Pzt, 18 Eki 2010 19:35:38 -0000 Kort Pzt, 18 Eki 2010 19:24:22 -0000 esclkm Paz, 17 Eki 2010 17:46:20 -0000 Kort Paz, 17 Eki 2010 14:22:35 -0000 pieter
They are not users you want to display in user overview.
But you don't want to delete them, because they can re-register.

This problem was already mentioned at seditio a long time ago.
http://www.neocrome.net/forums.php?m=posts&p=127330#127330]]>
Cmt, 16 Eki 2010 04:12:20 -0000
Kort 1. It doesn't work as expected
2. Hiding membership makes no sense at all
3. Nobody uses this because it's hard to understand the purpose
If someone does use this feature, I'd like to know what the benefit is and why it should not be modified.
Why would I need to hide a group? Ok, I got a site with a forum and an eshop, and the requirement is to autoregister a buyer upon successful purchase putting it to the Buyers group. And this is the group I'd like to hide. Other potential use is hiding clients or vip groups and protecting their user details.]]>
Cmt, 16 Eki 2010 02:25:11 -0000
GHengeveld right topic.

Are you sure the account you're using to call the userlist isn't administrator? Admins are able to see hidden groups and users (obviously). It depends on the rights setting for 'Core: Users', if 'admin' is enabled, that group will be able to see hidden users.

As for viewing the user's profile, I think you're right. The profile of a user who is only in a hidden group can be viewed as normal, even by a guest (unless of course guests can't view profiles at all. Only the name of the group he is in is hidden. I agree that this is slightly unexpected behavior.

Update: Ok, I was able to reproduce it. It's not a problem with the filters, those work fine. The list however, only hides the user group, not the users inside.

I think the feature was only meant to hide a user's membership to a certain group (basically hiding the fact that the group exists). We could change this behavior to what you're describing, but I don't think everyone will agree. Perhaps a plugin can fix this, so it becomes optional.

By the way, why do you want to hide a user? You could just pick some random username and nobody will know who the person behind the account is.]]>
Cmt, 16 Eki 2010 01:26:21 -0000
Kort - hidden groups are hidden in the list, their members also
- clicking on a hidden group username (comments, pages, forums or elsewhere) by a non-admin shall give you "not enough rights" message
- admins view hidden groups/users as normal
Imo this would be a nice way to hide / separate clients or customers where it is required. What do you guys think?]]>
Cmt, 16 Eki 2010 00:29:45 -0000