Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-30925

User is able to remove translations which he does not have access to edit

    XMLWordPrintable

    Details

      Description

      User is able to remove translations regardless of the language limitations he owns.

      Steps to reproduce:
      1. Add a new language, e.g. pol-PL.
      2. Create a new article "test".
      3. Add polish translation to "test".
      4. Create a new user "testUser".
      5. Create a new user group "testGroup" with the following policies and limitations:

       

      Module Function Limitations
      Content Edit Language: English (United Kingdom)
      Content Remove None
      Content Read None
      Content Manage_locations None
      Content Versionread None
      Content Versionremove None
      User Login None

       

      6. Assign the "testGroup" to "testUser".
      7.  Login as "testUser".
      8. Visit "test" content object and go to "Translations" tab.
      9. Try to remove polish translation.

      Result:
      You will be able to remove it successfully regardless of the "Language: English" limitation.

      Expected result:

      You should be able only to remove english translation.

      Note:
      There is no possibility to add language limitation neither to Content\Remove nor Content\Versionremove.
       

        Attachments

          Activity

            People

            Assignee:
            Unassigned Unassigned
            Reporter:
            konrad.oboza@ez.no Konrad Oboza
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: