Details
-
Bug
-
Resolution: Unresolved
-
High
-
None
-
dev-master, 2.5.0, 2.4.2
Description
Login as Admin.
Create Folder called ‘Site1’ under ` eZ Platform`.
Create Object State Group ‘Removal Lock’ with identifier ‘removal_lock’.
Add states ‘Unlocked’, ‘removal_lock_unlocked’ and ‘Locked’, ‘removal_lock_locked’ states.
Create Role ‘Site Owner’ with the following policies:
Content -> Read -> Location: /eZ Platform , /Media , /Users
User -> Login -> SiteAccess: site, admin
Create Role ‘Site Editor’ with the following policies:
Content -> Create -> Content Type: Article
Content -> Read -> None
Content -> Edit -> Content Type: Article
Content -> Versionread -> None
Content -> Versionremove -> None
Content -> Remove -> State: Removal Locked:Unlocked
Create user group ‘Site Editors’
Assign role ` Site Owner` to the create `Site Editors` group
Create a user ‘User1’ in ‘Site Editors’ user group
Assign ‘Site Editor’ role to ‘User1’ with a subtree limitation to the ‘Site1’ folder
Login as User
Navigate to the `Site1` folder.
Create an article in the `Site1` folder.
Save then select Delete from the right toolbar.
An exception will be thrown: User does not have access to 'remove' 'content' with: contentId '55'