Details
-
Bug
-
Resolution: Fixed
-
High
-
3.3.29, 4.3.3
-
Ibexa Open Source
Description
Steps to reproduce:
- Create the following content structure:
Ibexa Platform -----Folder -----------Subfolder ----------------------Article -----Deny
- Add second Location to "Article" and set it to "Deny" content.
- Edit the "Editor" role to only have the following Subtree assignments:
a) Editors - Ibexa Platform/Folder
b) Editors - Media - Add a new user to the "Editors" user group.
- Login as a new user from the previous step.
- Access "Article" (you can save the URL by being logged as an admin).
- Move "Article" to any Media folder.
Result:
One is presented with an exception:
The User does not have the 'read' 'content' permission
Expected result:
One should be able to move "Article" to the "Media" folder as he has access to both the "Article" and the "Media" locations.