? ? ? Success

User tests: Successful: Unsuccessful:

avatar andrepereiradasilva
andrepereiradasilva
14 May 2016

Summary of Changes

The "All Menu Items" was implemented in #10190 (which used empty as the value for the "- Select Menu -" option), but after the menus ACL was implemented in #9814 (which changed to * the value for the "- Select Menu -" option).

So, this PR goes back to (empty) as the value for the "- Select Menu -" option.

This allows to use /administrator/index.php?option=com_menus&view=items&menutype=URL (without a 403) as a fallback (in case the menu type is not found or something). This URL lists the all menu items list view.

Testing Instructions

  1. Use latest staging
  2. Go to /administrator/index.php?option=com_menus&view=items&menutype= you will get a 403 error
  3. Now apply patch
  4. Go to /administrator/index.php?option=com_menus&view=items&menutype= you'll be redirect to "All Menu Items" with no 403 error
  5. Navigate through the menus and create/Edit menu items and check if you're properly redirected after without issues
  6. Test batch and other operations also to confirm all is ok.

@infograf768 @bembelimen since you're the original creators of the two PR mentioned please test if all work as it should.

Observations

After this PR if you use:

  • /administrator/index.php?option=com_menus&view=items you'll be redirect to your current state selected menu item ("All Menu Items" if none).
  • /administrator/index.php?option=com_menus&view=items&menutype= you'll be redirect to "All Menu Items"
  • /administrator/index.php?option=com_menus&view=items&menutype=validmenutype you'll be redirect to your valid menu type
  • /administrator/index.php?option=com_menus&view=items&menutype=invalidmenutype you'll get a error the menu is not found
  • /administrator/index.php?option=com_menus&view=items&menutype=validmenutypebutnopermission you'll get a error not autorized
avatar andrepereiradasilva andrepereiradasilva - open - 14 May 2016
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 14 May 2016
Labels Added: ?
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
Title
[com_menus] items view: use empty for all menu instead of * (solves #10458)
[com_menus] items view: use empty for all menu instead of * (solves #10458 - 403 error part)
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar brianteeman brianteeman - change - 14 May 2016
Category Administration
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
Title
[com_menus] items view: use empty for all menu instead of * (solves #10458 - 403 error part)
[com_menus] items view: use empty for all menu instead of *
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
Title
[com_menus] items view: use empty for all menu instead of * (solves #10458 - 403 error part)
[com_menus] items view: use empty for all menu instead of *
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar Webdongle
Webdongle - comment - 14 May 2016

@andrepereiradasilva
I am confused about the test instructions.

Before applying the patch all test from 2 - 8 work as expected.

If you remove steps 1 and 2 from the test instructions
Then after the Test instructions you have
Expected result
describe what should be seen

Actual result
describe the error

Then .. After applying patch describe what error is fixed.

It would be easier to test. Because at the moment I am unable to reproduce the error this is supposed to fix.


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar andrepereiradasilva
andrepereiradasilva - comment - 14 May 2016

ok sorry, test instructions updated, now i think it's easier

avatar andrepereiradasilva andrepereiradasilva - change - 14 May 2016
The description was changed
avatar Webdongle Webdongle - test_item - 14 May 2016 - Tested successfully
avatar Webdongle
Webdongle - comment - 14 May 2016

I have tested this item :white_check_mark: successfully on ac541f6

Patch works

FULL SUCCESS


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar infograf768 infograf768 - test_item - 15 May 2016 - Tested successfully
avatar infograf768
infograf768 - comment - 15 May 2016

I have tested this item :white_check_mark: successfully on ac541f6


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar infograf768 infograf768 - change - 15 May 2016
Title
[com_menus] items view: use empty for all menu instead of *
small regression: [com_menus] items view: use empty for all menu instead of *
Status Pending Ready to Commit
avatar joomla-cms-bot joomla-cms-bot - change - 15 May 2016
Title
[com_menus] items view: use empty for all menu instead of *
small regression: [com_menus] items view: use empty for all menu instead of *
avatar infograf768
infograf768 - comment - 15 May 2016

RTC. Has to go into 3.6.0 as this is a new bug introduced by #9814


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 15 May 2016
Labels Added: ?
avatar bembelimen
bembelimen - comment - 15 May 2016

Hello,
/administrator/index.php?option=com_menus&view=items&menutype=existing-menu-without-access-rights
Expected result: 403
Current result: show all items

avatar bembelimen bembelimen - test_item - 15 May 2016 - Tested unsuccessfully
avatar bembelimen
bembelimen - comment - 15 May 2016

I have tested this item :red_circle: unsuccessfully on ac541f6


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar brianteeman brianteeman - change - 15 May 2016
Status Ready to Commit Pending
Labels
avatar brianteeman
brianteeman - comment - 15 May 2016

Oops didnt see the failed test -set back to pending


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 15 May 2016
Labels Removed: ?
avatar Webdongle
Webdongle - comment - 15 May 2016

@bembelimen

/administrator/index.php?option=com_menus&view=items&menutype=existing-menu-without-access-rights

What menu "menu-without-access-rights" ? If a user has access to the Menus >>> Manage >>> Menus view then they have access to all menus.


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar brianteeman
brianteeman - comment - 15 May 2016

There is a new acl feature in 3.6

avatar andrepereiradasilva
andrepereiradasilva - comment - 15 May 2016

@bembelimen thanks for checking that. Will check.

avatar infograf768
infograf768 - comment - 15 May 2016

i tested tha acl and it was working fine. here.

avatar joomla-cms-bot
joomla-cms-bot - comment - 15 May 2016

This PR has received new commits.

CC: @bembelimen, @infograf768, @Webdongle


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 15 May 2016
Labels Added: ?
avatar andrepereiradasilva
andrepereiradasilva - comment - 15 May 2016

@bembelimen please check now.
The code changes were this: a86f184

avatar andrepereiradasilva andrepereiradasilva - change - 15 May 2016
The description was changed
avatar andrepereiradasilva andrepereiradasilva - change - 15 May 2016
The description was changed
avatar andrepereiradasilva
andrepereiradasilva - comment - 15 May 2016

BTW @bembelimen there are some questions i notice in the menus ACL:

When you have a user that can't do anything (all denied) for a particular menu type:
updated see comment below

avatar andrepereiradasilva
andrepereiradasilva - comment - 15 May 2016

Update: Sorry i had "Access Administration Interface" set to Denied for that menu.

But still that is one issue (when all set to denied). that user can view/edit that menu type in Menu Types Manage (bug?)

avatar BurtNL BurtNL - test_item - 17 May 2016 - Tested successfully
avatar BurtNL
BurtNL - comment - 17 May 2016

I have tested this item :white_check_mark: successfully on a86f184

I have applied this patch on the latest staging together with #10460.
It is working as described. So this test is successfull.

I have not tested the new ACL feature.


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar bembelimen
bembelimen - comment - 17 May 2016

Hello @andrepereiradasilva

But still that is one issue (when all set to denied). that user can view/edit that menu type in Menu Types Manage (bug?)

The access rights are for the item(s) view only, not for the menu type stuff itself, there work the regular ACL settings

avatar andrepereiradasilva
andrepereiradasilva - comment - 18 May 2016

The access rights are for the item(s) view only, not for the menu type stuff itself, there work the regular ACL settings

@bembelimen
I see it was implemented that way, but IMHO doesn't make much sense a user can delete the entire menu and don't have access to delete a menu item in the same menu.

I made some changes (in new PR) to implement, at least part, of the ACL also in the menu types list view.

avatar infograf768 infograf768 - test_item - 22 May 2016 - Tested successfully
avatar infograf768
infograf768 - comment - 22 May 2016

I have tested this item successfully on a86f184

Except that we do not get a 403 but a 500 with message "You are not authorised to view this resource", the changes do now work when the menutype has no access rights when using:

/administrator/index.php?option=com_menus&view=items&menutype=existing-menu-without-access-rights


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar infograf768 infograf768 - change - 22 May 2016
Status Pending Ready to Commit
avatar infograf768
infograf768 - comment - 22 May 2016

RTC

Thanks


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 22 May 2016
Labels Added: ?
avatar brianteeman brianteeman - change - 22 May 2016
Milestone Added:
avatar infograf768
infograf768 - comment - 22 May 2016

Conflicts concern only one file.

avatar joomla-cms-bot
joomla-cms-bot - comment - 22 May 2016

This PR has received new commits.

CC: @bembelimen, @BurtNL, @infograf768, @Webdongle


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot
joomla-cms-bot - comment - 22 May 2016

This PR has received new commits.

CC: @bembelimen, @BurtNL, @infograf768, @Webdongle


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot
joomla-cms-bot - comment - 22 May 2016

This PR has received new commits.

CC: @bembelimen, @BurtNL, @infograf768, @Webdongle


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar andrepereiradasilva
andrepereiradasilva - comment - 22 May 2016

conflicts fixed

avatar infograf768 infograf768 - test_item - 22 May 2016 - Tested successfully
avatar infograf768
infograf768 - comment - 22 May 2016

I have tested this item successfully on 8e294e3


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar roland-d roland-d - change - 23 May 2016
Status Ready to Commit Pending
Labels
avatar roland-d
roland-d - comment - 23 May 2016

Taking RTC off as we only have one successful test so far


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 23 May 2016
Labels Removed: ?
avatar bembelimen bembelimen - test_item - 23 May 2016 - Tested successfully
avatar bembelimen
bembelimen - comment - 23 May 2016

I have tested this item successfully on 8e294e3


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar andrepereiradasilva
andrepereiradasilva - comment - 23 May 2016

@roland-d RTC now?

thanks for testing @infograf768 @bembelimen

avatar brianteeman brianteeman - change - 23 May 2016
Status Pending Ready to Commit
Labels
avatar brianteeman
brianteeman - comment - 23 May 2016

Back to rtc


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10459.

avatar joomla-cms-bot joomla-cms-bot - change - 23 May 2016
Labels
avatar roland-d
roland-d - comment - 23 May 2016

I am looking into it

avatar roland-d roland-d - change - 23 May 2016
Status Ready to Commit Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2016-05-23 14:09:15
Closed_By roland-d
Labels Added: ?
avatar roland-d
roland-d - comment - 23 May 2016

Thanks everybody

Add a Comment

Login with GitHub to post a comment