Understand View-Only Versus Editable Users

QCFUM deliberately separates visibility from editability. A Joomla account can be allowed into the Frontend User Manager list but still be shown as View only when the delegated manager is not allowed to change it.

Protected accounts are different: QCFUM removes them from normal managed-user results and also refuses them again server-side if an action is submitted directly.

Visibility Uses the Source Groups

A target must intersect the configured Users shown source groups. QCFUM evaluates the target’s authorized Joomla groups, including inherited parent groups, so visibility is based on effective group authorization rather than direct membership alone.

Editability Adds a Second Group Test

For changes, the same target must also intersect the separate Users frontend managers may change groups. If the user passes the visible/source test but not the editable test, the row remains useful for review while QCFUM marks it View only.

Protection Overrides Both

QCFUM protects the current manager when configured, explicit excluded user IDs, administrator notification recipients when configured, and accounts/groups with core.admin, core.login.admin, or core.manage. Manual protected groups are also honored. These safeguards override permissive source/editable settings.

Actions Are Not Authorized by the Button

Editable rows can expose identity, group, password, status, MFA-flag, delete, and bulk controls only when those individual actions are enabled. On submission, QCFUM again checks the frontend management ACL, Max entitlement, current target editability, and protection state before applying anything.

A Safe Test

  1. Choose one ordinary Joomla user who should be editable.
  2. Choose another ordinary user who should be visible but view-only.
  3. Use the real delegated staff account—not Super User—to confirm the badges and controls.
  4. Also test a protected administrative account and confirm it does not become manageable.

Community Discussion

Want to compare Joomla user-onboarding workflows, share practical QCFUM tips, or discuss how other administrators use this feature? Visit the QC Frontend User Manager Community. For private support, bug reports, account-specific entitlement problems, or feature requests, use the QuantaCade support system.