QCFUM - Security, Joomla Groups & Permissions

Configure QCFUM security boundaries, Joomla group visibility and destination rules, protected users and groups, frontend manager permissions, Super User protections, ACL, CSRF safeguards, and the controls that determine who can view or manage Joomla users.

Articles
Title	Published Date	Author
QCFUM’s Security Model: Controlled Joomla Users Without Backend Access Understand QCFUM’s security model: delegate controlled Joomla user workflows from the frontend without granting backend access or creating child accounts.	September 26, 2026	QuantaCade
Joomla Menu Access, QCFUM ACL, and Plan Entitlement: Three Separate Gates Separate Joomla menu access, QCFUM action ACL, and plan entitlement so visible frontend pages never become accidental authorization for sensitive actions.	September 26, 2026	QuantaCade
Configure QCFUM Administrator Permissions Configure QCFUM Administrator ACL for settings, automation, approvals, Profiles, Invite Packs, Join Codes, email, Insights, design and update duties.	September 26, 2026	QuantaCade
Configure QCFUM Frontend Permissions Configure QCFUM frontend ACL for Create, Invite, CSV, tracking and Max User Manager workflows, then test the exact Joomla group used by staff.	September 26, 2026	QuantaCade
Test QCFUM Permissions with the Exact Joomla Group Used by Staff Test QCFUM with the exact non-Super-User Joomla group used by staff so menu access, ACL, tier gates and protected-target safeguards are proven together.	September 26, 2026	QuantaCade
How QCFUM Protects Super Users and Administrative Accounts Learn how QCFUM protects Super Users and other backend-capable Joomla accounts with server-side capability, group-inheritance and target checks.	September 26, 2026	QuantaCade
Configure Groups Always Hidden or Protected from Frontend Management Configure QCFUM protected Joomla groups, understand inherited group matching, and keep backend-capable or high-risk accounts outside frontend management.	September 26, 2026	QuantaCade
Configure Users Shown in the Frontend User Manager Configure QCFUM source groups that determine which existing Joomla users appear in the Max Frontend User Manager, including inherited group matching.	September 26, 2026	QuantaCade
Configure Which Visible Users Frontend Managers May Change Use QCFUM editable groups to separate view-only users from users delegated managers may change, while source, inheritance and protection rules still apply.	September 26, 2026	QuantaCade
Configure Joomla Groups Frontend Managers May Assign or Remove Configure the safe Joomla groups QCFUM frontend managers may assign or remove while preserving unrelated direct memberships and blocking protected groups.	September 26, 2026	QuantaCade
Protect Specific Joomla User IDs from Frontend Management Protect specific Joomla user IDs from QCFUM frontend management with a server-enforced exclusion list for high-risk or special accounts.	September 26, 2026	QuantaCade
Exclude the Current Frontend Manager and Administrator Notification Recipients Exclude the logged-in QCFUM manager and configured administrator notification recipients from delegated frontend user management.	September 26, 2026	QuantaCade
Joomla Group Inheritance in QCFUM Visibility, Editability, and Protection Understand how QCFUM uses Joomla parent-group inheritance for visibility, editability, and protection while changing only direct memberships.	September 26, 2026	QuantaCade
How QCFUM Protects Passwords, Invite Tokens, and Sensitive Account Actions See how QCFUM protects generated passwords, hashes Invite Link tokens, and requires Joomla session and authorization checks for sensitive actions.	September 26, 2026	QuantaCade
Security Checklist Before Enabling Delegated Frontend User Management Use this QCFUM security checklist before giving staff delegated frontend user-management access on a production Joomla site.	September 26, 2026	QuantaCade