Feeling Lucky
?
[#11593] - [com_plugins] User not allowed to core.manage? Use 403 php custom exception (instead of a 404 JError)
- Fixed in Code Base
- 14 Aug 2016
- Medium
- Build: staging
- # 11593
- Diff
- andrepereiradasilva:poc-exception-plugins
- Success continuous-integration/travis-ci/pr The Travis CI build passed Details
- Success JTracker/HumanTestResults Human Test Results: 2 Successful 0 Failed. Details
User tests: Successful: Unsuccessful:
Pull Request for Improvement.
Summary of Changes
Replace com_plugins existing 404 JError for a 403 php exception when the user does not have access to "Access Administration Interface" (core.manage).
Also adds a custom exception JControllerExceptionNotallowed for this effect.
Before
After
Testing Instructions
- Use latest staging
- Create a user and add it to "Administrator" group
- Go to com_plugins and set "Access Administration Interface" (core.manage) to "Denied" for "Administrator" group
- Login with the Administrator user in a private window and go to /administrator/index.php?option=com_plugins
- See the red message (Before)
- Apply patch
- Repeat step 4, you'll see now a 403 error (After).
When/If merged i can do it for the other components.
thanks @mbabker
joomla-cms-bot
- | Category | ⇒ | Administration Components Libraries |
| Status | New | ⇒ | Pending |
| Labels |
Added:
?
|
||
jeckodevelopment
- comment
- 14 Aug 2016
I have tested this item
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11593.
MATsxm
- comment
- 14 Aug 2016
I have tested this item
Thanks
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11593.
| Status | Pending | ⇒ | Ready to Commit |
jeckodevelopment
- comment
- 14 Aug 2016
RTC please
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11593.
| Labels |
Added:
?
|
||
rdeutz
- | Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2016-08-14 16:28:49 |
| Closed_By | ⇒ | rdeutz |
| Labels |
Removed:
?
|
||
I have tested this item✅ successfully on
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11593.