Thread

It appears that when I make a new site in MSM that EE randomly picks which member groups get control panel access to this new site. Any ideas why this is happening?

BTW.. We have 44 sites and 41 member groups using EE 1.7.0

Thanks,
Jason

Hi Jason,

I believe that access is the default for member groups when creating a new site. I’m not aware of any way to change that default so you will have to edit each group appropriately. It shouldn’t be assigned permissions randomly for CP access. CP access should be off by default for all groups that are not Super Admins. Can you give us an example of what has happened? Was this only recently?

Cheers

Greg

For test purposes I created a site under MSM called “test”. I then went to that site in the control panel under the SITES tab. I then clicked on ADMIN > MEMBERS & GROUPS > MEMBER GROUPS. About half of the 40+ groups are in red meaning they have control panel access to this new site (TEST). It appears to be random which groups automatically get access. We have been having problems for awhile where groups were seeing sites in their control panel they shouldn’t see. I just assumed it was user error on our part but now I see that EE is randomly doing it when we create sites.

After looking further at the member groups I can see that the ones getting control panel access to the test site all have control panel access to our default site.

Are you wanting those member groups to have access to all the sites, or just one site in particular? You’ll need to go in by hand and modify what they have access to. I know it’s a pain to do.

I would like No member groups to have control panel access when I create a new site.

Shouldn’t that setting default to No?

From what I can tell… every time I create a new site all member groups that already have control panel access to our default master site (the first site we created in EE) automatically gets control panel access to the new site. I would prefer no member groups having control panel access by default unless they have super admin rights.

When you created your member groups, did you base them off of the SuperAdmin group? I did on one of the sites we had 15 member groups, and I had to go change their access.

No, when we create a member group the only settings we edit are for the sites we want them to have access.

I did a test and removed control panel access from our master site for one member group. I then created a new site and that particular member group had no control panel access for the new site. Which is what we want. But all the other member groups that have control panel access to our master site were also given control panel access to the new site by default.

FYI..When I say master site I mean the initial site we built when we first installed EE. We had to give all Member Groups access to its control panel else they would not be able to log into the main control panel. The control panel defaults to the master site and without control panel access for the master site they would get a accessed denied message. Is there a workaround to where we don’t have to give control panel access to the master site?

Could there be a setting in the master site that causes all member groups to get control panel access to any new site creations?

Hi USG IWS,

FYI..When I say master site I mean the initial site we built when we first installed EE. We had to give all Member Groups access to its control panel else they would not be able to log into the main control panel. The control panel defaults to the master site and without control panel access for the master site they would get a accessed denied message. Is there a workaround to where we don’t have to give control panel access to the master site?

This sounds like the root of the issue. Have you considered using Masked Access for each of your domains where a member needs access to that particular site’s control panel but no others?

Cheers

Greg

I made a new discovery… Which member groups get control panel access to the new site is depended on which site I’m currently on in the control panel when I create the new site.

So lets say I’m logged into our control panel and I’m on site #23. The member groups that have control access to site #23 will also get control panel access to the new site I create.

If I’m on site #12 when I create a new site the member groups that have access to site #12’s control panel will automatically get control panel access to the new site.

The control panel preference is the only one causing problems. The other preferences stay at their default values for the new site created.

Hi, USG IWS.

This does sound like a bug to me.

Ordinarily, I’d post the bug report, but since you have a full setup where you can replicate this, do you mind filing it? Screen shots would help a great deal. Or if you don’t feel comfortable filing the bug report, can you post screen shots here and I’ll file it?

I will post a bug report when I get chance. Thanks for your help.

Jason

Sounds good, I’ll look for it, and update this thread. If it takes more than a day or two, let me know via this thread, and I’ll help with creating it.

I created a bug report. Thanks.

Bug report: https://support.ellislab.com/bugs/detail/15570/