Opened 6 years ago

Closed 6 years ago

#1759 closed defect (fixed)

Content Manager: the permission to create new page in first level has no effect

Reported by: kramer Owned by: kramer
Priority: must Milestone: Contrexx 3.1 SP1
Component: ContentManager Version: 3.1 Hotfix 1
Severity: normal Keywords:
Cc:

Description

If a user wants to create a new page in the first level of the site tree, he can do this without the permission "Allowed to create page in first level" (access-id: 127).

The access id 127 should be checked for act=new of content manager!

Change History (3)

comment:1 Changed 6 years ago by kramer

  • Resolution set to fixed
  • Status changed from new to closed

(In https://github.com/Cloudrexx/cloudrexx/commit/82c33ab72aded0612cf4fbdb91ca863af4b8a796) Merged revision(s) 27314 from trunk: ContentManager? (fixed #1759): the permission to create new page in first level didn't have an effect.

comment:2 Changed 6 years ago by kramer

  • Resolution fixed deleted
  • Status changed from closed to reopened

fix does not work for all situations

new solution idea:

  • revert changeset 27315
  • remove backend navigation "new page" if the user does not have permission to create a new page
  • show permission denied page if the user opens act=new view

comment:3 Changed 6 years ago by kramer

  • Resolution set to fixed
  • Status changed from reopened to closed

(In https://github.com/Cloudrexx/cloudrexx/commit/4f5225287938eb15b6a9750837e8b416f31edb8e) Merged revision(s) 27317 from trunk: ContentManager? (fixed #1759): reverted last commit, added no access page if the user wants to create a new page on first level, removed navigation items "new page" if the user has no permission to create page in first level

Note: See TracTickets for help on using tickets.