Understand QCLF Administrator Permissions and Component ACL
QC Live Forum uses Joomla component ACL for backend administration, then applies separate QCLF action permissions to sensitive operations. Frontend moderation has its own authority checks and should not be confused with Joomla Administrator access.
Design delegated roles around the smallest permissions they actually need instead of giving every forum operator Super User access.
Backend Entry Gate
To enter the QC Live Forum Administrator component, a user must have Joomla core.manage for com_qcforum or core.admin. A user who only has frontend moderation authority does not automatically gain backend component access.
QCLF Component Actions
| Permission | Current purpose |
|---|---|
| Manage Settings | Change QCLF settings, Email settings/templates, and Custom CSS actions where the Effective tier also permits them. |
| Manage License | Refresh entitlement, clear a saved Legacy License Key, and start the one-time Max Preview. |
| Manage Forum | Create/edit/publish/delete/reorder Sections and Categories and perform structure-management actions. |
| Manage Moderation | Acts as global QCLF moderation authority in frontend moderation checks and related moderation-notification logic. |
core.admin Overrides Normal QCLF Action Checks
Inside the Administrator helper, core.admin satisfies the normal QCLF custom-action checks. One especially sensitive exception is task repair: repairing the Entitlement Revalidation task/plugin is explicitly restricted to a Super User/global core.admin check.
Frontend Moderation Is Separate
Frontend moderator authority can come from Manage Moderation, assigned moderator groups, or scoped Category moderation permissions depending on the action. Those frontend checks do not grant Joomla backend access.
Likewise, Manage Forum is not a substitute for Category member permissions such as create/reply, and a backend administrator should still test the real frontend experience with a non-Super-User account.
Least-Privilege Pattern
- Give only trusted administrators core.manage for QC Live Forum when backend access is required.
- Grant Manage Settings, License, Forum, and/or Moderation only for the responsibilities that role needs.
- Use QCLF Section/Category ACL and assigned moderator groups for community scope rather than broad backend permissions.
- Test both Administrator actions and frontend moderation with the delegated account before production use.
Community Discussion
Want to compare forum workflows, share practical QCLF tips, or discuss how other Joomla site owners use this feature? Visit the QC Live Forum Community. For private support, bug reports, account-specific entitlement problems, or feature requests, use the QuantaCade support system.