?

User tests: Successful: Unsuccessful:

avatar sanderpotjer
sanderpotjer
8 Apr 2014

Current ACL checks are causing unexpected results as ACL is only available for com_menus in general. So no need to check for ACL settings for com_menus.item.XX, only com_menus available.

Example of wrong behaviour right now: someone with edit state allowed for com_menus is not able to change the state by clicking on the publish/unpublish icon. This patch will fix this.

JoomlaCode: http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=33578

Test instructions:

  • create a new user group
  • allow "backend access" for this group in the global configuration permissions
  • allow "Access Administration Interface" and "Edit State" action for the Menu Manager for the group
  • create test user, assign to created group
  • login with test user
  • try to publish/unpublish a menu item. Result: "Edit state not permitted".
  • apply patch
  • try to publish/unpublish a menu item. Result: "1 menu item successfully unpublished/published"
avatar sanderpotjer sanderpotjer - open - 8 Apr 2014
avatar sanderpotjer sanderpotjer - change - 8 Apr 2014
Title
Remove ACL checks for specific menu item
Remove ACL checks for specific menu item (J 2.5)
avatar sanderpotjer sanderpotjer - change - 8 Apr 2014
Title
Remove ACL checks for specific menu item (J 2.5)
[#33578] Remove ACL checks for specific menu item (J 2.5)
avatar sanderpotjer
sanderpotjer - comment - 11 Jul 2014

Looks like a duplicate report has been committed meanwhile: http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=33769 & #3636

Will close this one.

avatar sanderpotjer sanderpotjer - close - 11 Jul 2014
avatar sanderpotjer sanderpotjer - head_ref_deleted - 12 Jul 2014

Add a Comment

Login with GitHub to post a comment