What we have
A fresh installation of Joomla! 3.7.3
User U (Publisher group, Administrator Login allowed, Access Administration Interface allowed for both modules and menus)
Menu M, containing the main menu
Module M, displaying the main menu M
User U can edit by default all the modules
Now we set the permissions of module M denying Edit and Edit state actions to Publishers.
The Advanced Permissions Report for User U shows that’s all correct, user U is allowed to edit the menu M but can’t modify the corresponding module.
When user U logins in the administration panel he can see the list of modules, and the module M isn’t editable.
What happens
Step 1.
User U logins in the administration panel
Step 2.
User U navigates to Menus > Manage
Step 3.
User U clicks on Modules button in "Linked Modules" column
Step 4.
User U select module M item in the dropdown list
The module M item in the dropdown list shouldn’t be active
OR
The popup window shown after clicking on module M item should report that user U hasn’t the rights to modify the module
User U, clicking on module M item in the dropdown list, gets a popup window that allows him to edit all the values of the module, except Status, Start publishing and Finish publishing.
Joomla! Version
Joomla! 3.7.3 Stable [ Amani ] 4-July-2017 08:03 Joomla! Platform Version
If we deny global edit permissions for modules to user U, the system works fine: he cannot modify M. When user U try to modify module M from ”Linked Modules", the popup window shows an "Error Edit not permitted.." red warning).
Status | New | ⇒ | Information Required |
@noccioletta good catch, that is indeed wrong!
I have created a PR request that fixes this issue, see #17838
(@franz-wohlkoenig thanks for notifying me of this issue)
Status | Information Required | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2017-09-02 19:01:41 |
Closed_By | ⇒ | franz-wohlkoenig |
Set to "closed" on behalf of @franz-wohlkoenig by The JTracker Application at issues.joomla.org/joomla-cms/17188
closed as having Pull Request #17838 Thanks @sanderpotjer
@franz-wohlkoenig @sanderpotjer
Thank you !
Greetings from Università degli Studi di Perugia, Italy (http://www.unipg.it).
@sanderpotjer can you please have a Look?