J3 Issue ?
avatar joomlatester
joomlatester
2 Nov 2018

Is your feature request related to a problem? Please describe.

Display module to all Administrator not only Super User and add feature to show action only a logged in user.
Example: Popular Articles > Authors (Anyone, Added or modified by me)
Example: Latest Actions > Actions (All, Only my actions)

Describe the solution you'd like

Additional context

avatar joomlatester joomlatester - open - 2 Nov 2018
avatar joomla-cms-bot joomla-cms-bot - change - 2 Nov 2018
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 2 Nov 2018
avatar zero-24
zero-24 - comment - 2 Nov 2018

Hi,

Display module to all Administrator not only Super User

RE: (by @mbabker )

It was purposefully decided to restrict these components to super users only. In the case of a privacy request, when exporting data the person processing the request inherently must have (or gains through an information leak) read access to all of the data that plugins are responding with. When removing data, the person processing the request must inherently have (or gains by bypassing ACL) what is in essence a combination of core.edit and core.delete permissions. And for action logs, someone could see a user performing actions in a component they may not even be aware is installed because ACL restricts them from even seeing it.
If we made it so non super users were able to access these components, inherently we are either dealing with some form of ACL violation in other parts of the system or the processed data must be ACL restricted to that user's role, resulting in an incomplete action log or data export.

Where this would result into an information leak to the Administrator Users.

More context can be found here: #20281 (comment)

add feature to show action only a logged in user.
Example: Popular Articles > Authors (Anyone, Added or modified by me)
Example: Latest Actions > Actions (All, Only my actions)

I fully understand the request. I would like to hear @brianteeman 's and @mbabker 's opinion on this first as this module is not directly intended to do something like this and it would add yet another option :)

avatar brianteeman
brianteeman - comment - 6 Nov 2018

I agree with @mbabker comment

avatar brianteeman brianteeman - change - 6 Nov 2018
Labels Added: J3 Issue
avatar brianteeman brianteeman - labeled - 6 Nov 2018
avatar franz-wohlkoenig franz-wohlkoenig - change - 4 Mar 2019
Status New Information Required
avatar franz-wohlkoenig
franz-wohlkoenig - comment - 4 Mar 2019

@brianteeman does your Comment mean to close this Issue?


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/22922.

avatar franz-wohlkoenig
franz-wohlkoenig - comment - 4 Mar 2019

@brianteeman does your Comment mean to close this Issue?


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/22922.

avatar brianteeman
brianteeman - comment - 4 Mar 2019

That is my personal opinion

avatar franz-wohlkoenig franz-wohlkoenig - change - 4 Mar 2019
Status Information Required Closed
Closed_Date 0000-00-00 00:00:00 2019-03-04 17:36:06
Closed_By franz-wohlkoenig
avatar joomla-cms-bot joomla-cms-bot - change - 4 Mar 2019
Closed_Date 2019-03-04 17:36:06 2019-03-04 17:36:07
Closed_By franz-wohlkoenig joomla-cms-bot
avatar joomla-cms-bot joomla-cms-bot - close - 4 Mar 2019
avatar joomla-cms-bot
joomla-cms-bot - comment - 4 Mar 2019
avatar franz-wohlkoenig
franz-wohlkoenig - comment - 4 Mar 2019

thanks @brianteeman

closing this Issue as there is no Response; it can always reopened.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/22922.

Add a Comment

Login with GitHub to post a comment