On the other side, this will force mode administration on an initial 
or simple installation. But of course this is a my personal point of 
view.



I protected the administration actions by return false if checking 
DELETE and the permission don't exits. So in in first install, all is 
allowed and the administration actions are leaved only to the super 
admin.



Duck

Sorry for the buzz, but I recreated my permissions and everything went 
back to normal.



However, I do not agree with you about if not permissions are found in 
a scope. I think you should return false instead of true in that case. 
It will be stimulus for the admins to create needed permissions after 
upgrade (like it was in my case).

You have this permissions on scope or an a specific forum? If no forum 
or scope permission is set, the access is granted. If exists, it first 
checks the scope and then the forums permission.



We can change the logic a little bit to bi more protective for delete 
permission if no permission is set. For example to grant DELETE 
permission only for admin.

Agora permission system doesn't work anymore. Even guests can move, 
lock, delete messages/forums.



My permission set:

All Authenticated Users: Show, Read

Guests: Show, Read

Owner: Show, Read, Edit, Delete