Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-30925

User is able to remove translations which he does not have access to edit

    XMLWordPrintable

Details

    Description

      User is able to remove translations regardless of the language limitations he owns.

      Steps to reproduce:
      1. Add a new language, e.g. pol-PL.
      2. Create a new article "test".
      3. Add polish translation to "test".
      4. Create a new user "testUser".
      5. Create a new user group "testGroup" with the following policies and limitations:

       

      Module Function Limitations
      Content Edit Language: English (United Kingdom)
      Content Remove None
      Content Read None
      Content Manage_locations None
      Content Versionread None
      Content Versionremove None
      User Login None

       

      6. Assign the "testGroup" to "testUser".
      7.  Login as "testUser".
      8. Visit "test" content object and go to "Translations" tab.
      9. Try to remove polish translation.

      Result:
      You will be able to remove it successfully regardless of the "Language: English" limitation.

      Expected result:

      You should be able only to remove english translation.

      Note:
      There is no possibility to add language limitation neither to Content\Remove nor Content\Versionremove.
       

      Attachments

        Activity

          People

            Unassigned Unassigned
            konrad.oboza@ibexa.co Konrad Oboza
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: