Mundo phpBB

# Permissions Viewer

Permissions Viewer is a read-only phpBB ACP extension for inspecting, auditing, explaining and documenting permissions.

It is designed for administrators who need to understand phpBB ACL configuration without changing permissions, users, groups, forums, categories or roles.

## Status

Version **3.0.0** is the stable package baseline.

The extension is intentionally audit-oriented and read-only. The only data it writes is its own optional audit-history snapshot table; it does not write to phpBB ACL tables.

## Main features

- ACP menu separated into focused pages.
- Full permission listing with filters by type, scope and category.
- Descriptions loaded from phpBB and extension language files whenever available.
- Fallback descriptions for permissions without loaded language entries.
- Permission detail view showing roles, groups and users that use a permission.
- Group/user lookup with direct permissions and role-expanded permissions.
- Effective permission consolidation using the precedence `NEVER > YES > NO`.
- Comparison between two users or two groups.
- Category/forum permission map.
- Comparison between two categories/forums for the same group or user.
- Audit report for critical, attention and warning items.
- Forum diagnostics for common local permission inconsistencies.
- Expected profile comparison for common forum access patterns.
- Final report view with clean print mode and CSV export.
- Extension permission audit for custom permissions, missing descriptions and possible orphaned permissions.
- Final checklist for audit handoff.
- Interpretation assistant for simpler explanations.
- Audit history snapshots for checklist summaries.
- About page powered by `composer.json` metadata.

## ACP pages

- Overview
- Permissions
- Group/user lookup
- Category/forum map
- Compare forums/categories
- Comparison
- Audit
- Forum diagnostics
- Expected profiles
- Final report
- Extension audit
- Final checklist
- Interpretation assistant
- Audit history
- About

The **About** page is intentionally kept as the final item in the left ACP menu.

## Requirements

- phpBB `>=3.3.0,<4.0.0@dev`
- PHP `>=7.1.3`

## Installation

Copy the extension to:

```text
ext/mundophpbb/permissionsviewer/
```

Then enable it in:

```text
ACP > Customise > Manage extensions
```

After updating from an earlier package, clear the phpBB cache. If a new ACP menu entry does not appear immediately, disable and enable the extension again so phpBB can register new ACP module modes.

## Safety model

This extension does not modify phpBB ACL configuration.

It does not edit:

- permissions;
- users;
- groups;
- forums;
- categories;
- roles;
- phpBB ACL tables.

The audit-history feature stores only audit snapshot summaries in the extension's own table.

## Documentation

Additional documentation is available in:

- `docs/USAGE.md`
- `docs/TESTING.md`
- `docs/UPGRADE.md`
- `docs/RELEASE_CHECKLIST.md`

## License

GPL-2.0-only.