With #4975, we added a new ACL rule core.option to the article manager which allows to access the options, but without the "Permissions" tab. Previously, you had to give that user basically SuperAdmin permissions (at least for that component).
This PR adds that new rule to the other core extensions.
Testing
Create a second user and adjust the permissions in the various components so he can access the options ("Configure Options Only") but doesn't have "Configure ACL & Options" permissions.
Check with SuperUser and this new user if the options work as expected. SuperUser should be able to save the permissions. The new user should not see them and not be able to save them (even if he fakes the form).
The components to check are:
Banners
Contacts
Smart Search (Finder)
Search
Extension Installer
Joomla Update
Media
Menu
Newsfeed
Redirect
Tags
User
Template Manager
Known Issue
The Template Manager is a bit special as you currently need SuperUser permissions anyway to even access the whole thing. I still added the new rule but it's pointless atm like all the other ones there. That's will be improved with another PR I already prepared, but it's out of scope for this PR.
wilsonge
- 
joomla-cms-bot
-
Everything works as far as i can see - great stuff
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/6978.