J3 Issue No Code Attached Yet
avatar Flowman
Flowman
19 Mar 2019

Steps to reproduce the issue

Create a group with permission to logon to admin
Create a category and assign the group the create
Login as the user and filter by the category
Try to create an article

Expected result

User should be able to create article

Actual result

User cannot create article

System information (as much as possible)

Joomla 3.9.4

Additional comments

$canDo = JHelperContent::getActions('com_content', 'category', $this->state->get('filter.category_id'));

The $this->state->get('filter.category_id') is an array and get converted into a int.

$assetName .= '.' . $section . '.' . (int) $id;

So the asset name will always be "com_content.category.1"

avatar Flowman Flowman - open - 19 Mar 2019
avatar joomla-cms-bot joomla-cms-bot - change - 19 Mar 2019
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 19 Mar 2019
avatar franz-wohlkoenig franz-wohlkoenig - change - 20 Mar 2019
Status New Information Required
avatar franz-wohlkoenig
franz-wohlkoenig - comment - 20 Mar 2019

@HLeithner can you please comment?

avatar HLeithner
HLeithner - comment - 20 Mar 2019

Maybe a problem of the multi category filter feature? Can't validate it at the moment. @Quy can you check this?

avatar Flowman
Flowman - comment - 20 Mar 2019

I guess the getActions method should check if the ID is array than process the whole array, if it a single value do what it does today.

avatar Flowman
Flowman - comment - 20 Mar 2019

I just realized that create work as there is "count($user->getAuthorisedCategories('com_content', 'core.create'))" that fixes the issue for create, but I was testing core.edit and core.edit.state that does not work.

if ($canDo->get('core.create') || count($user->getAuthorisedCategories('com_content', 'core.create')) > 0)

avatar franz-wohlkoenig franz-wohlkoenig - change - 22 Mar 2019
Category ACL com_content
avatar franz-wohlkoenig franz-wohlkoenig - change - 4 Apr 2019
Labels Added: J3 Issue
avatar franz-wohlkoenig franz-wohlkoenig - labeled - 4 Apr 2019
avatar franz-wohlkoenig franz-wohlkoenig - change - 19 Apr 2019
Title
[3.9] Articles permission issue
Articles permission issue
avatar franz-wohlkoenig franz-wohlkoenig - edited - 19 Apr 2019

Add a Comment

Login with GitHub to post a comment