Details
-
Bug
-
Resolution: Won't Fix
-
High
-
4.7.0
Description
If you you use the popup menu to create here content in the sub-items panel, the roles won't be respected.
That happens because Create Here is considering the current open node, not the node the clicked wheel refers to.
Steps to reproduce
- Edit contentstructuremenu.ini.append.php and add the following lines:
[TreeMenu] CreateHereMenu=full
- Create a new TestContext role and give it the following permissions:
content create Class( Folder , Article ) , ParentClass( Folder ) content dashboard No limitations content edit Owner( Self ) ezjscore call No limitations ezoe browse No limitations user login No limitations websitetoolbar use No limitations
- Create a new TestGroup User Group and assign Anonymous and TestContext roles to it
- Create a new TestUser user in TestGroup group
- Log into the backend with TestUser
- On Sub Items panel, select the main home page
- Click the Create New button and confirm the class selection popup won't let you create any object. That's correct because you can only create objects insider a folder, and you are in a homepage.
- Ignore the Create New button.
- Go the Sub items and click the wheel in a child folder item, then select the Create Here
- Confirm you won't be able to create an objects. That's wrong because the Create Here should consider the permissions of the folder in where you will create the new object, not the object where you have currently open.