You can add a group on the community site.

[Speedysnail6]

A regular user can add groups to the community site.
​http://community.elgg.org/groups/add

[cash]

this works as expected - we stop the action

[ewinslow]

Wouldn't it be reasonable to have a permissions check at the top of this page?

[cash]

I removed the link to the page. This means the user is manually typing in the URL. To prevent someone from accessing the page, we would have to register for the routing plugin hook and then check if an admin. I feel like I have a ton of other things to do and this is really about improving the user experience for people who are trying to bypass our restrictions - so extremely low priority for me.

[ewinslow]

I mean more generally in Elgg, if the page is for performing some action, would it not be a good idea to check if they can actually perform that action?

Agreed about priorities.

[cash]

I added some ideas to the Permissions Gdoc related to this. What if we changed the permissions system to be CRUD based. Then there would be a way to ask if a user can create something and add that to pages that create content. Right now all we can do is ask if the user has permissions to write to a container which is different.

[Speedysnail6]

It just looks sloppy to keep the form there.

[cash]

You can submit a pull request to ​https://github.com/Elgg/community_groups