Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-24833

Permission : content ( manage_location ) by class or subtree not working

    XMLWordPrintable

Details

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Low Low
    • None
    • 2014.11
    • Legacy stack
    • None
    • Ubuntu 14.04
      5.5.9-1ubuntu4.11
      Apache2

    Description

      Goal: grant content (manage_location) so that an Admin can assign a User to a 2nd user Group and thus grant additional roles and permissions.

      This worked in 4.6 and works in BUL 5.4

      There are 3 ways (i can think of) to do this

      Option A

      1. create role 'User Location Manager by class'
      2. add permission

      • content (manage_location) class(user) section (user)
        3. save role
        4. assign role to 'Site Admin' user group
        This is dangerous becuase it's not contrained
        This does not work

      Option B

      1. create role 'User Location Manager specific nodes all classes'
      2. add permission

      • content (manage_location) subtree (/Users) subtree(/Editors)
        3. save role
        4. assign role to 'Site Admin' user group
        This is limited and acceptable but not flexible
        This does not work
        restricting by class ( user ) should be added but that didn't work either

      Option C

      1. create role 'User Location Manager by subtree'
      2. add permission

      • content (manage_location)
        3. save role
        4. assign role BY SUBTREE to 'Site Admin' user group to /Users
        5. assign role BY SUBTREE to 'Site Admin' user group to /Editors
        This is sort of dangerous becuase it's not class specific
        This WORKS

      How To Test Permission is working

      • Login as 'Site Admin' (user Group) member
      • Navigate to /Users
      • Click on a user that admin wants to add a location on
      • The location's tab should have checkboxes (to remove) and both buttons (Remove/Add) should be available.

      Attachments

        Activity

          People

            Unassigned Unassigned
            9eb34429-4ba7-4cec-9fd2-e83a1fdd6ac1@accounts.ibexa.co David Sayre
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: