Details
-
Bug
-
Resolution: Fixed
-
High
-
1.13.1, 2.0.2, 1.7.7
-
None
Description
Steps to reproduce:
- Create content structure as follow:
- Root/Folder1
- Root/Folder2
- Create an article (e.g. ArticleA) in Root/Folder1
- Create new user group (e.g. Contributors)
- Create new user in Contributors group
- Add all policies which are required to be able to work with PlatformUI/BO (user/login, content/read, etc.)
- Add content/{create,publish,remove,versionread,versionremove policy with Subtree limitation on /Root/Folder2/
- Go to ArticleA and add the new location under /Root/Folder2.
Current behavior:
The user can create the new location, but can't remove it.
Expected behavior (according to Legacy):
As in legacy, content/manage_locations policy should be checked and a user shouldn't be able to create the new location without it.
sylvain.guittard@ez.no what do you think about this change? Should we change it and make it work as it was in Legacy? This change might be problematic for the customers because all of them will need to update policies (add the new one content/manage_locations) if they want to make editors allowed to add a new location.