User tests: Successful: Unsuccessful:
Pull Request for Issue #45193 .
Changed the permission check from core.manage
to core.admin
for the Extensionupdate.php and the Joomlaupdate.php
This change restricts access to Super Users only, preventing regular administrators from accessing and viewing this feature.
Tested by verifying that the quickicon for Joomla Update is only visible to Super Users and not to regular administrators.
The quickiocn Override should be green (if there are no overrides to check).
Please select:
Documentation link for docs.joomla.org:
No documentation changes for docs.joomla.org needed
Pull Request link for manual.joomla.org:
No documentation changes for manual.joomla.org needed
Status | New | ⇒ | Pending |
Category | ⇒ | Front End Plugins |
I have tested this item ✅ successfully on b18c52a
I have tested this PR successfully and very happily. This will reduce my client calls by at least 1/2 (no joke) Thanks @tecpromotion!
I am not convinced this is the correct approach as it hides that there are updates available. Even if you cannot do an update I believe the user should be informed an update is available
Labels |
Added:
PR-5.3-dev
|
I am not convinced this is the correct approach as it hides that there are updates available. Even if you cannot do an update I believe the user should be informed an update is available
Thanks for your comment @brianteeman
Should it just be displayed (not clickable) or should a message appear when clicked telling the user to contact a super user?
I am not convinced this is the correct approach as it hides that there are updates available. Even if you cannot do an update I believe the user should be informed an update is available
Thanks for your comment @brianteeman Should it just be displayed (not clickable) or should a message appear when clicked telling the user to contact a super user?
Just displayed would be acceptable to me
Being asked to contact a super user would be preferred - I'm sure we have something similar to that somewhere
Just displayed would be acceptable to me Being asked to contact a super user would be preferred - I'm sure we have something similar to that somewhere
Okay, we use this check in different situations and in even more different ways.
Perhaps we can use this to our advantage.
// Access check. if (!$this->getCurrentUser()->authorise('core.admin')) { throw new NotAllowed(Text::_('JERROR_ALERTNOAUTHOR'), 403); }
But would that display that an update is available?
Please dont misunderstand me. The current situation is not good and needs to be fixed - I just believe that we should be able to inform admins that a new version is available even if they dont have the access to perform an update
But would that display that an update is available?
Please dont misunderstand me. The current situation is not good and needs to be fixed - I just believe that we should be able to inform admins that a new version is available even if they dont have the access to perform an update
What you would need to do in the onGetIcons function:
sounds right to me
I have tested this item 🔴 unsuccessfully on 4b326d0
I applied the patch as Super User, went to the Home Dashboard and got this:
An error has occurred.
0 Joomla\Plugin\Quickicon\Joomlaupdate\Extension\Joomlaupdate::__construct(): Argument #2 ($document) must be of type Joomla\CMS\Document\Document, array given, called in /Users/ceford/Sites/joomla-cms5/plugins/quickicon/joomlaupdate/services/provider.php on line 35
Return to Dashboard
```<hr /><sub>This comment was created with the <a href="https://github.com/joomla/jissues">J!Tracker Application</a> at <a href="https://issues.joomla.org/tracker/joomla-cms/45872">issues.joomla.org/tracker/joomla-cms/45872</a>.</sub>
Status | Pending | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2025-09-29 15:50:46 |
Closed_By | ⇒ | tecpromotion |
@ceford and @exlemor I would be delighted if you would test this PR.