No Code Attached Yet
avatar ceford
ceford
23 Mar 2025

Steps to reproduce the issue

New J5.2.5 installation or any existing J5 installation.
Create a user in the Administrator user group.
Login as the Administrator user.
The Home Dashboard shows a Notifications panel with red notices for Unknown Joomla ... and Error on checking overrides.

Expected result

No errors or no Notices

Actual result

Selecting Unknown Joomla leads to 403 You don't have permission to access this. Please contact a website administrator if this is incorrect.
Selecting Error on checking overrides leads to the Templates: Templates (Site) page.

System information (as much as possible)

Additional comments

The solution is to set the Access levels for the two Quick Icons involved to Super User, Which the Administrator can do. Should they be set to Super User by default?

avatar ceford ceford - open - 23 Mar 2025
avatar ceford ceford - change - 23 Mar 2025
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 23 Mar 2025
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 23 Mar 2025
avatar brianteeman
brianteeman - comment - 23 Mar 2025

The solution is to set the Access levels for the two Quick Icons involved to Super User, Which the Administrator can do. Should they be set to Super User by default?

Surely that is not a solution as we do want an admin to know if there is a new version available

avatar ceford
ceford - comment - 23 Mar 2025

The Notifications module has Access set to Special. Maybe that should be set to Super Users and the Plugins left at Public.

avatar brianteeman
brianteeman - comment - 23 Mar 2025

that makes no sense at all as we want the admin to know there is a new version available. Why are you trying to hide it

avatar HLeithner
HLeithner - comment - 23 Mar 2025

Administrator can't update joomla so hiding it is a valid solution (better then a error message)

avatar ceford
ceford - comment - 23 Mar 2025

Having looked at the coding, some more information.

The Quick Icon plugins use this sort of check:

!$this->getApplication()->getIdentity()->authorise('core.manage', 'com_joomlaupdate')

com_joomlaupdate does not have a Permissions tab in its Options so I guess inherits the Global permissions. For Administrator that would include Access Administrator Interface: Allowed (but an Administrator is not allowed to update Joomla)

com_templates has Access Administrator Interface: Allowed for Administrator but although the Administrator user is allowed to see the Site Templates he cannot edit them.

So it seems to me the optimum solution seems to be the change of Access level to Super User in the relevant plugins.

Add a Comment

Login with GitHub to post a comment