Edit Allowed Joomla User Groups from the Frontend

QCFUM’s frontend group editor changes only the Joomla groups an administrator has explicitly allowed as Frontend User Manager targets. It does not give delegated staff unrestricted access to the Joomla group tree.

The workflow uses direct Joomla group memberships for the actual write, while inherited/authorized groups are used separately for visibility, editability, and protection decisions.

The Administrator Defines the Editable Group Set

The Groups frontend managers may assign/remove setting supplies the candidate target groups. QCFUM removes protected groups from that set before showing it to the manager.

The Entire Request Must Be Allowed

When saving, QCFUM re-checks that group editing is enabled, the target is still editable, at least one allowed target group is selected, and every requested group belongs to the current allowed set. It refuses a mixed allowed/unauthorized request rather than silently applying only the safe subset.

Unrelated Existing Groups Are Preserved

QCFUM reads the target’s current direct memberships. Groups outside the administrator-approved target set are preserved. The selected allowed groups replace only the editable portion, and QCFUM writes the resulting direct membership list through Joomla group APIs.

Protected Groups Stay Out of the Workflow

Groups manually protected or detected as carrying core.admin, core.login.admin, or core.manage are removed from the assignable set. Inherited protected authorization also keeps the target account itself outside normal frontend management.

Approval May Intercept the Save

If frontend group-change approval is enabled, QCFUM stores the validated requested group set as a durable pending request instead of applying it immediately. A reviewer later revalidates the current target, allowed groups, protection rules, entitlement, and approval state before execution.

Community Discussion

Want to compare Joomla user-onboarding workflows, share practical QCFUM tips, or discuss how other administrators use this feature? Visit the QC Frontend User Manager Community. For private support, bug reports, account-specific entitlement problems, or feature requests, use the QuantaCade support system.