?
avatar PeterTHM
PeterTHM
14 Dec 2020

Steps to reproduce the issue

  1. In backend go to: System->Global Configuration->Articles->Permissions
  2. Set the acl permissions for a user group with backend access to :
    Create->Allowed
    Edit->Denied
    Edit Own->Allowed
    Edit Custom Field Value->Allowed
  3. Create a field group as Super User
  4. Create a field within this group as Super User
  5. Login as user of the resticted group
  6. Create a field within the previously created article field group
  7. Return to article fields list view

Expected result

  1. The field created by the super user should not beeing editable for the restricted user.
  2. The field created by the restricted user should be editable for both.

Actual result

  1. Works
  2. The field created by the restricted user is displayed as selectable for it's creator but when the user
    clicks on it, he will get a permission denied error.

image

System information (as much as possible)

Joomla 3.9.23

Additional comments

Maybe thats just a naming mistake:

The field controller in com_fields administrator section trys to get the user id of the fields creator by the field records 'created_by' attribute, which is not present in the db. Instead the db field holding the creator id is 'created_user_id'.

return $user->id == $record->created_by;

avatar PeterTHM PeterTHM - open - 14 Dec 2020
avatar joomla-cms-bot joomla-cms-bot - change - 14 Dec 2020
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 14 Dec 2020
avatar PeterTHM PeterTHM - change - 14 Dec 2020
The description was changed
avatar PeterTHM PeterTHM - edited - 14 Dec 2020
avatar PeterTHM PeterTHM - change - 14 Dec 2020
Title
[com_fields] Can't edit own field in backend when 'edit.own' is set for my user group
[com_fields] Can't edit own field in backend when 'edit.own' is set for user group
avatar PeterTHM PeterTHM - edited - 14 Dec 2020
avatar sandramay0905
sandramay0905 - comment - 14 Apr 2021

Confirmed the issue, test on Joomla4 - nightly build:

grafik

avatar joomdonation joomdonation - change - 14 Apr 2021
Status New Closed
Closed_Date 0000-00-00 00:00:00 2021-04-14 12:55:15
Closed_By joomdonation
avatar joomdonation joomdonation - close - 14 Apr 2021
avatar joomdonation
joomdonation - comment - 14 Apr 2021

Thanks @PeterTHM for the propose code. Thanks @sandramay0905 for checking and confirming the issue. I made PR #33129 to solve the issue. Please test.

Add a Comment

Login with GitHub to post a comment