? Pending

User tests: Successful: Unsuccessful:

avatar brianteeman
brianteeman
3 Jul 2018

All the modules in the admin control panel have a cog icon which lets you edit the module. Howeveer the permission check is not correct as you need to have access to the module component AND to edit the module.

To test

Create a user with default manager permissions
Create a user with default administrator permissions
Change the permissions on one module so that only Super Users can edit the module

Login as manager - the cog is displayed on all the modules but you get a 403
Login as administrator - the cog is displayed and works on all the modules except the one you dont have permission to edit where you get a 403
Login as super user - the cog is displayed and works on all the modules

Apply the pr

Login as manager - the cog is not displayed at all
Login as administrator - the cog is displayed and works on all the modules except the one you dont have permission to edit where the cog is not displayed at all
Login as super user - the cog is displayed and works on all the modules

avatar brianteeman brianteeman - open - 3 Jul 2018
avatar brianteeman brianteeman - change - 3 Jul 2018
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 3 Jul 2018
Category Administration Templates (admin)
avatar Quy Quy - change - 3 Jul 2018
Title
Module cog
[4.0] Module cog
avatar joomla-cms-bot joomla-cms-bot - edited - 3 Jul 2018
avatar brianteeman brianteeman - change - 4 Jul 2018
Labels Added: ?
avatar brianteeman
brianteeman - comment - 31 Aug 2018

Closed see #21932

avatar brianteeman brianteeman - change - 31 Aug 2018
Status Pending Closed
Closed_Date 0000-00-00 00:00:00 2018-08-31 10:05:58
Closed_By brianteeman
avatar brianteeman brianteeman - close - 31 Aug 2018

Add a Comment

Login with GitHub to post a comment