Managing Users in XOOPS¶
Learn how to create user accounts, organize users into groups, and manage permissions in XOOPS.
User Management Overview¶
XOOPS provides comprehensive user management with:
Users > Accounts
├── Individual users
├── User profiles
├── Registration requests
└── Online users
Users > Groups
├── User groups/roles
├── Group permissions
└── Group membership
System > Permissions
├── Module access
├── Content access
├── Function permissions
└── Group capabilities
Accessing User Management¶
Admin Panel Navigation¶
- Log in to admin:
http://your-domain.com/xoops/admin/ - Click Users in left sidebar
- Select from options:
- Users: Manage individual accounts
- Groups: Manage user groups
- Online Users: See currently active users
- User Requests: Process registration requests
Understanding User Roles¶
XOOPS comes with predefined user roles:
| Group | Role | Capabilities | Use Case |
|---|---|---|---|
| Webmasters | Administrator | Full site control | Main admins |
| Admins | Administrator | Limited admin access | Trusted users |
| Moderators | Content control | Approve content | Community managers |
| Editors | Content creation | Create/edit content | Content staff |
| Registered | Member | Post, comment, profile | Regular users |
| Anonymous | Visitor | Read only | Non-logged-in users |
Creating User Accounts¶
Method 1: Admin Creates User¶
Step 1: Access User Creation
- Go to Users > Users
- Click "Add New User" or "Create User"
Step 2: Enter User Information
Fill in user details:
Username: [4+ characters, letters/numbers/underscore only]
Example: john_smith
Email Address: [Valid email address]
Example: john@example.com
Password: [Strong password]
Example: MyStr0ng!Pass2025
Confirm Password: [Repeat password]
Example: MyStr0ng!Pass2025
Real Name: [User's full name]
Example: John Smith
URL: [Optional user website]
Example: https://johnsmith.com
Signature: [Optional forum signature]
Example: "Happy XOOPS user!"
Step 3: Configure User Settings
User Status: ☑ Active
☐ Inactive
☐ Pending Approval
User Groups:
☑ Registered Users
☐ Webmasters
☐ Admins
☐ Moderators
Step 4: Additional Options
Notify User: ☑ Send welcome email
Allow Avatar: ☑ Yes
User Theme: [Default theme]
Show Email: ☐ Public / ☑ Private
Step 5: Create Account
Click "Add User" or "Create"
Confirmation:
Method 2: User Self-Registration¶
Allow users to register themselves:
Admin Panel > System > Preferences > User Settings
Allow User Registration: ☑ Yes
Registration Type:
☐ Instant (Approve automatically)
☑ Email Verification (Email confirmation)
☐ Admin Approval (You approve each)
Send Verification Email: ☑ Yes
Then: 1. Users visit registration page 2. Fill in basic information 3. Verify email or wait for approval 4. Account activated
Managing User Accounts¶
View All Users¶
Location: Users > Users
Shows user list with: - Username - Email address - Registration date - Last login - User status (Active/Inactive) - Group membership
Edit User Account¶
- In user list, click username
- Modify any field:
- Email address
- Password
- Real name
- User groups
-
Status
-
Click "Save" or "Update"
Change User Password¶
- Click user in list
- Scroll to "Change Password" section
- Enter new password
- Confirm password
- Click "Change Password"
User will use new password on next login.
Deactivate/Suspend User¶
Temporarily disable account without deletion:
- Click user in list
- Set User Status to "Inactive"
- Click "Save"
User cannot log in while inactive.
Reactivate User¶
- Click user in list
- Set User Status to "Active"
- Click "Save"
User can log in again.
Delete User Account¶
Remove user permanently:
- Click user in list
- Scroll to bottom
- Click "Delete User"
- Confirm: "Delete user and all data?"
- Click "Yes"
Warning: Deletion is permanent!
View User Profile¶
See user profile details:
- Click username in user list
- Review profile information:
- Real name
- Website
- Join date
- Last login
- User bio
- Avatar
- Posts/contributions
Understanding User Groups¶
Default User Groups¶
XOOPS includes default groups:
| Group | Purpose | Special | Edit |
|---|---|---|---|
| Anonymous | Non-logged-in users | Fixed | No |
| Registered Users | Regular members | Default | Yes |
| Webmasters | Site administrators | Admin | Yes |
| Admins | Limited admins | Admin | Yes |
| Moderators | Content moderators | Custom | Yes |
Create Custom Group¶
Create group for specific role:
Location: Users > Groups
- Click "Add New Group"
- Enter group details:
Group Name: Content Editors
Group Description: Users who can create and edit content
Display Group: ☑ Yes (Show in member profiles)
Group Type: ☑ Regular / ☐ Admin
- Click "Create Group"
Manage Group Membership¶
Assign users to groups:
Option A: From Users List
- Go to Users > Users
- Click user
- Check/uncheck groups in "User Groups" section
- Click "Save"
Option B: From Groups
- Go to Users > Groups
- Click group name
- View/edit member list
- Add or remove users
- Click "Save"
Edit Group Properties¶
Customize group settings:
- Go to Users > Groups
- Click group name
- Modify:
- Group name
- Group description
- Display group (show/hide)
- Group type
- Click "Save"
User Permissions¶
Understanding Permissions¶
Three permission levels:
| Level | Scope | Example |
|---|---|---|
| Module Access | Can see/use module | Can access Forum module |
| Content Permissions | Can view specific content | Can read published news |
| Function Permissions | Can perform actions | Can post comments |
Configure Module Access¶
Location: System > Permissions
Restrict which groups can access each module:
Module: News
Admin Access:
☑ Webmasters
☑ Admins
☐ Moderators
☐ Registered Users
☐ Anonymous
User Access:
☐ Webmasters
☐ Admins
☑ Moderators
☑ Registered Users
☑ Anonymous
Click "Save" to apply.
Set Content Permissions¶
Control access to specific content:
Example - News article:
View Permission:
☑ All groups can read
Post Permission:
☑ Registered Users
☑ Content Editors
☐ Anonymous
Moderate Comments:
☑ Moderators required
Permission Best Practices¶
Public Content (News, Pages):
├── View: All groups
├── Post: Registered Users + Editors
└── Moderate: Admins + Moderators
Community (Forum, Comments):
├── View: All groups
├── Post: Registered Users
└── Moderate: Moderators + Admins
Admin Tools:
├── View: Webmasters + Admins only
├── Configure: Webmasters only
└── Delete: Webmasters only
User Registration Management¶
Handle Registration Requests¶
If "Admin Approval" enabled:
- Go to Users > User Requests
- View pending registrations:
- Username
- Registration date
-
Request status
-
For each request:
- Click to review
- Click "Approve" to activate
- Click "Reject" to deny
Send Registration Email¶
Resend welcome/verification email:
- Go to Users > Users
- Click user
- Click "Send Email" or "Resend Verification"
- Email sent to user
Online Users Monitoring¶
View Currently Online Users¶
Track active site visitors:
Location: Users > Online Users
Shows: - Current online users - Guest visitors count - Last activity time - IP address - Browsing location
Monitor User Activity¶
Understand user behavior:
Active Users: 12
Registered: 8
Anonymous: 4
Recent Activity:
- User1 - Forum post (2 min ago)
- User2 - Comment (5 min ago)
- User3 - Page view (8 min ago)
User Profile Customization¶
Enable User Profiles¶
Configure user profile options:
Admin > System > Preferences > User Settings
Allow User Profiles: ☑ Yes
Show Member List: ☑ Yes
Users Can Edit Profile: ☑ Yes
Show User Avatar: ☑ Yes
Show Last Online: ☑ Yes
Show Email Address: ☐ Yes / ☑ No
Profile Fields¶
Configure what users can add to profiles:
Example profile fields: - Real name - Website URL - Biography - Location - Avatar (picture) - Signature - Interests - Social media links
Customize in module settings.
User Authentication¶
Enable Two-Factor Authentication¶
Enhanced security option (if available):
Admin > Users > Settings
Users must verify with second method.
Password Policy¶
Enforce strong passwords:
Admin > System > Preferences > User Settings
Minimum Password Length: 8 characters
Require Uppercase: ☑ Yes
Require Numbers: ☑ Yes
Require Special Chars: ☑ Yes
Password Expiration: 90 days
Force Change on First Login: ☑ Yes
Login Attempts¶
Prevent brute force attacks:
User Email Management¶
Send Bulk Email to Group¶
Message multiple users:
- Go to Users > Users
- Select multiple users (checkboxes)
- Click "Send Email"
- Compose message:
- Subject
- Message body
- Include signature
- Click "Send"
Email Notification Settings¶
Configure what emails users receive:
Admin > System > Preferences > Email Settings
New Registration: ☑ Send welcome email
Password Reset: ☑ Send reset link
Comments: ☑ Notify on replies
Messages: ☑ Notify new messages
Notifications: ☑ Site announcements
Frequency: ☐ Immediate / ☑ Daily / ☐ Weekly
User Statistics¶
View User Reports¶
Monitor user metrics:
Admin > System > Dashboard
User Statistics:
├── Total Users: 256
├── Active Users: 189
├── New This Month: 24
├── Registration Requests: 3
├── Currently Online: 12
└── Last 24h Posts: 45
User Growth Tracking¶
Monitor registration trends:
Registrations Last 7 Days: 12 users
Registrations Last 30 Days: 48 users
Active Users (30 days): 156
Inactive Users (30+ days): 100
Common User Management Tasks¶
Create Admin User¶
- Create new user (steps above)
- Assign to Webmasters or Admins group
- Grant permissions in System > Permissions
- Verify admin access works
Create Moderator¶
- Create new user
- Assign to Moderators group
- Configure permissions to moderate specific modules
- User can approve content, manage comments
Setup Content Editors¶
- Create Content Editors group
- Create users, assign to group
- Grant permissions to:
- Create/edit pages
- Create/edit posts
- Moderate comments
- Restrict admin panel access
Reset Forgotten Password¶
User forgot their password:
- Go to Users > Users
- Find user
- Click username
- Click "Reset Password" or edit password field
- Set temporary password
- Notify user (send email)
- User logs in, changes password
Bulk Import Users¶
Import user list (advanced):
Many hosting panels provide tools to: 1. Prepare CSV file with user data 2. Upload via admin panel 3. Mass create accounts
Or use custom script/plugin for imports.
User Privacy¶
Respect User Privacy¶
Privacy best practices:
Do:
✓ Hide emails by default
✓ Let users choose visibility
✓ Protect against spam
Don't:
✗ Share private data
✗ Display without permission
✗ Use for marketing without consent
GDPR Compliance¶
If serving EU users:
- Get consent for data collection
- Allow users to download their data
- Provide delete account option
- Maintain privacy policy
- Log data processing activities
Troubleshooting User Issues¶
User Can't Login¶
Problem: User forgot password or can't access account
Solution: 1. Verify user account is "Active" 2. Reset password: - Admin > Users > Find user - Set new temporary password - Send to user via email 3. Clear user cookies/cache 4. Check if account is not locked
User Registration Stuck¶
Problem: User can't complete registration
Solution: 1. Check registration is allowed: - Admin > System > Preferences > User Settings - Enable registration 2. Check email settings work 3. If email verification required: - Resend verification email - Check spam folder 4. Lower password requirements if too strict
Duplicate Accounts¶
Problem: User has multiple accounts
Solution: 1. Identify duplicate accounts in Users list 2. Keep primary account 3. Merge data if possible 4. Delete duplicate accounts 5. Enable "Prevent Duplicate Email" in settings
User Management Checklist¶
For initial setup:
- Set user registration type (instant/email/admin)
- Create required user groups
- Configure group permissions
- Set password policy
- Enable user profiles
- Configure email notifications
- Set user avatar options
- Test registration process
- Create test accounts
- Verify permissions working
- Document group structure
- Plan user onboarding
Next Steps¶
After setting up users:
- Install modules users need
- Create content for users
- Secure user accounts
- Explore more admin features
- Configure system-wide settings
Tags: #users #groups #permissions #administration #access-control
Related Articles: - Admin-Panel-Overview - Installing-Modules - Security-Configuration - System-Settings