Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23259

"Create Here" won't respect policies and show all classes in the wheel menu

    XMLWordPrintable

Details

    Description

      If you you use the popup menu to create here content in the sub-items panel, the roles won't be respected.
      That happens because Create Here is considering the current open node, not the node the clicked wheel refers to.

      Steps to reproduce

      1. Edit contentstructuremenu.ini.append.php and add the following lines:
        [TreeMenu]
        CreateHereMenu=full
        
      2. Create a new TestContext role and give it the following permissions:
        content 		create		Class( Folder , Article ) , ParentClass( Folder )
        content 		dashboard	No limitations
        content 		edit		Owner( Self )
        ezjscore 		call		No limitations
        ezoe			browse		No limitations
        user			login		No limitations
        websitetoolbar	use			No limitations
        
      3. Create a new TestGroup User Group and assign Anonymous and TestContext roles to it
      4. Create a new TestUser user in TestGroup group
      5. Log into the backend with TestUser
      6. On Sub Items panel, select the main home page
      7. Click the Create New button and confirm the class selection popup won't let you create any object. That's correct because you can only create objects insider a folder, and you are in a homepage.
      8. Ignore the Create New button.
      9. Go the Sub items and click the wheel in a child folder item, then select the Create Here
      10. Confirm you won't be able to create an objects. That's wrong because the Create Here should consider the permissions of the folder in where you will create the new object, not the object where you have currently open.

      Attachments

        Activity

          People

            Unassigned Unassigned
            eduardo.fernandes-obsolete@ez.no Eduardo Fernandes (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day, 40 minutes
                1d 40m