Details
-
Story
-
Resolution: Fixed
-
High
-
2.5.2
-
[3.0] - Sprint 11
Description
Fix problem with access to read content with locationId = ‘1’
Prereq.: Create an user assigned to the Administrator role with section limitation for Media and for Users.
Flow 1:
- Go to Admin / Users.
Actual result: Error 500 An exception has been thrown during the rendering of a template ("User does not have access to 'read' 'content' with: locationId '1'")..
Flow 2:
- Go to Content / Search. Or Trash. Or Drafts (from user menu). Or Bookmarks.
Actual result: Error is displayed in UI item is undefined.
Flow 3:
- Go to Admin / Sections.
- Create new section.
- Fill name and identifier.
- Click Create.
Actual result: Error 403 User does not have access to 'view' 'section'.
Expected result: If user is allowed to see only the sections he's assigned to perhaps creating should be disabled.
Attachments
Issue Links
1.
|
Fix usage of hasAccess method in Admin UI | Closed | Unassigned | |
2.
|
User should add and edit section without view permission | Closed | Unassigned | |
3.
|
User should not see add section button without permission to view created section | Closed | Unassigned |