No Code Attached Yet bug
avatar Scrabble96
Scrabble96
7 Jan 2022

Steps to reproduce the issue

Create a new user of type 'Publisher'
Log into front end using those credentials
Start to edit an article
Click/tap 'CMS Content' and select 'Media' from the list

Expected result

Access to images in the images folder and sub-folders

Actual result

An access denied message:
"You don't have permission to access this. Please contact a website administrator if this is incorrect."
Followed by a large gap and then an apparently empty 'images' folder.

System information (as much as possible)

J4.0.5

Additional comments

All other options under CMS Content are accessible.
A user type of 'Administrator' is allowed access to the Media folder(s)

avatar Scrabble96 Scrabble96 - open - 7 Jan 2022
avatar joomla-cms-bot joomla-cms-bot - change - 7 Jan 2022
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 7 Jan 2022
avatar Scrabble96 Scrabble96 - change - 7 Jan 2022
The description was changed
avatar Scrabble96 Scrabble96 - edited - 7 Jan 2022
avatar zero-24
zero-24 - comment - 7 Jan 2022

On a quick look the issue seems to be that core.manage within com_media is required and makes sense can you check whether that permission has been granted: https://github.com/joomla/joomla-cms/blob/4.0-dev/components/com_media/src/Dispatcher/Dispatcher.php#L55

avatar brianteeman
brianteeman - comment - 7 Jan 2022

image

avatar brianteeman
brianteeman - comment - 7 Jan 2022

On a quick look the issue seems to be that core.manage within com_media is required and makes sense can you check whether that permission has been granted: https://github.com/joomla/joomla-cms/blob/4.0-dev/components/com_media/src/Dispatcher/Dispatcher.php#L55

@zero-24 the permissions there make no sense at all which I guess @Hackwar realised when he changed it for 4.1 #35886

However @particthistle then changed it further with #35863

Neither of those fixes help or are correct. Core.manage = access administrator interface

So of course a publisher etc would not have permission for that. I am guessing that it just needs core.create ?

avatar Scrabble96
Scrabble96 - comment - 22 Jan 2022

Can anything be done about this? My client can't do any useful front-end editing without access to images.
Edit: I've added the 'Manager' user group to the profile, but that's only a workaround.

avatar luktaas
luktaas - comment - 8 Feb 2022

I have a similar problem, although in my case the publisher can access the media manager while editing an article, but not access it while editing a module. It is about an ImageHoverGalley extension where my client has to manage the images in the FrontEnd. The same error message appears: "You do not have permission to open this. If this is incorrect, please contact a website administrator."

Publisher rights are set to "allowed" in this module.

The problem is apparently not related to any template or extension. Among other things, I tested with a new Joomla 4.0.6 with only Cassiopeia and the concerned extension.

Can this be repaired?

avatar Hackwar Hackwar - change - 17 Feb 2023
Labels Added: bug
avatar Hackwar Hackwar - labeled - 17 Feb 2023

Add a Comment

Login with GitHub to post a comment