No Code Attached Yet bug
avatar AndySDH
AndySDH
27 Dec 2020

Steps to reproduce the issue

  • Let's say you have a category called "Animals" with a few articles in it
  • Assign some Custom Fields to the articles of the category "Animals"
  • Make one of these Custom Field (of any type, doesn't matter) a "Required" field
  • In the Field Permissions of the "Required" field, set that a certain usergroup (eg. "Editor") cannot edit the custom field
  • Make sure that in the Field Options "Display When Read-Only" is set to Yes (it's Yes by default)
  • Now login in the frontend with a user of the "Editor" usergroup
  • Try to edit an article inside the "Animals" category

Current result

You won't be able to save it, the form will complain that the required field is missing.

It's required but you have no way to submit it because it's disabled for you.

It doesn't even matter if the "Required" field already has a value previously entered (eg. by an Admin). An Editor won't be able to save this article no matter what. Which is even more wrong, because the field even has a value already, yet the form won't submit either:

image

Expected result

You should be able to submit the form even if there is a required field that you have no permissions to edit (whether it's empty or filled).

Additional comments

This already works correctly when "Display When Read-Only" is set to No, because the field is removed from the form.

But if "Display When Read-Only" is set to Yes, then this issue arises.

System information (as much as possible)

Joomla 3.9.23 and all previous Joomla, this has been a longstanding issue.

I haven't tested this in Joomla 4 but I'm pretty sure this is an issue on 4 as well.

avatar AndySDH AndySDH - open - 27 Dec 2020
avatar joomla-cms-bot joomla-cms-bot - change - 27 Dec 2020
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 27 Dec 2020
avatar AndySDH AndySDH - change - 27 Dec 2020
The description was changed
avatar AndySDH AndySDH - edited - 27 Dec 2020
avatar AndySDH AndySDH - change - 27 Dec 2020
Title
You can't submit a form if it there is a required disabled field
[com_fields] You can't submit a form if it there is a required disabled field
avatar AndySDH AndySDH - edited - 27 Dec 2020
avatar Fedik
Fedik - comment - 27 Dec 2020

disabled or readonly? these is very different states

avatar AndySDH
AndySDH - comment - 27 Dec 2020

So the issue may be here:

$node->setAttribute('disabled', 'true');

Line 209 should be readonly instead of disabled. Is that it? @Fedik

avatar AndySDH AndySDH - change - 27 Dec 2020
Title
[com_fields] You can't submit a form if it there is a required disabled field
[com_fields] You can't submit a form if no permissions to edit a custom field
avatar AndySDH AndySDH - edited - 27 Dec 2020
avatar AndySDH AndySDH - change - 27 Dec 2020
Title
[com_fields] You can't submit a form if no permissions to edit a custom field
[com_fields] You can't submit a form if no permissions to edit a required custom field
avatar AndySDH AndySDH - edited - 27 Dec 2020
avatar AndySDH AndySDH - change - 27 Dec 2020
The description was changed
avatar AndySDH AndySDH - edited - 27 Dec 2020
avatar AndySDH
AndySDH - comment - 27 Dec 2020

On further inspect, a problem with changing that to 'readonly' would be that chosenJS (which is used by Joomla to output fields in the form) ignores readonly "visually:

There is a plugin for that though: https://www.npmjs.com/package/chosen-readonly
Which is based on this simple script that solves it: http://jsfiddle.net/eirc/v2es7L8o/


Also radio fields don't play well with readonly:
https://stackoverflow.com/questions/38251473/how-to-make-a-radio-button-read-only-but-not-disabled
And they need a CSS tweak to make them "look like" readonly.

input[type="radio"].readonly { opacity: 0.5; /* not necessary */ pointer-events: none; }

But this was actually already fixed for Radio fields, so no problem: see PR #12039
(minus the opacity thing which would be nice to add)


Either way, using readonly would definitely be better than disabled for the issue reported here.

The problem / side effect of disabled="disabled" is, that it "removes" the field from the data set and it then isn't sent to the server.

avatar Fedik
Fedik - comment - 27 Dec 2020

Line 209 should be readonly instead of disabled. Is that it?

Hard to say. The difference that "disabled" not editable and browser does not submit the value, while "readonly" not editable, but browser submit the value.

So if it set disabled but also required then backend validation will fail (I guess js also), and will show "required" error.

avatar AndySDH
AndySDH - comment - 27 Dec 2020

Yes, exactly, so changing that line I mentioned in my previous comment from disabled to readonly should fix the issue.

Or maybe, another approach:

if ($required)

Maybe changing line 2122 to
if ($required && $fieldExistsInRequestData)
could also be a solution.

This would mean that the validation that checks if a field is required would only happen if the field is actually submitted.
So disabled fields (which are not submitted) wouldn't be subject to the "required" validation.

avatar Fedik
Fedik - comment - 27 Dec 2020

so changing that line I mentioned in my previous comment from disabled to readonly should fix the issue.

Unless it not access check, that will make another issue ?
I not very know that part.

Maybe there need extra check: if User set field params readonly

avatar bembelimen
bembelimen - comment - 28 Dec 2020

Disable has the benefit, that Joomla checks for it. So I think the proper solution could be, that the check here should be in an else below (when not disabled)?

avatar Fedik
Fedik - comment - 28 Dec 2020

@bembelimen if someone want to use disabled instead of readonly, then value should be preloaded from database (or where it stored) before validateField()

The problem not really in validation, but in logic in general.

avatar obuisard
obuisard - comment - 29 Jul 2022

More and more users are reporting this issue. They are getting into very complicated forms using custom fields that may be required fields and read-only. It seems like this is a Joomla 4 issue as well. The only workaround right now is to set the option 'Display When Read-Only' to 'No'.

avatar brianteeman
brianteeman - comment - 29 Jul 2022

The only workaround right now is to set the option 'Display When Read-Only' to 'No'.

No - the only way is to use the fields correctly. A form with a required field obviously cant be created by a user that you dont give access to that field. You can't have a field that requires input and for it to be readonly. That is a non sequitur.

avatar AndySDH
AndySDH - comment - 30 Jul 2022

@brianteeman Depends.

The example is provided right exactly in the opening post. Maybe you want a user to edit (not create) an existing article that had a required field already filled by an admin.
But you don't want him to be able to edit that one field.
Or maybe you want him to edit just the article text and have no permission on the fields at all (but still keep them readonly).

Just like the screenshot in the first post. This is a perfectly valid and correct usage scenario.

And that is not possible right now.

avatar Hackwar Hackwar - change - 20 Feb 2023
Labels Added: No Code Attached Yet bug
Removed: ?
avatar Hackwar Hackwar - labeled - 20 Feb 2023

Add a Comment

Login with GitHub to post a comment