?
avatar Terrox
Terrox
4 Jan 2016

I posted this in the forum. http://forum.joomla.org/viewtopic.php?f=708&t=903378

Steps to reproduce the issue

Set Permissions of Tag component to prevent Create for all access except Super Admin
Edit Article and create a new tag

Expected result

Should not be able to create a new tag when not permitted

Actual result

System information (as much as possible)

Additional comments

Votes

# of Users Experiencing Issue
1/2
Average Importance Score
4.50

avatar Terrox Terrox - open - 4 Jan 2016
avatar ggppdk
ggppdk - comment - 4 Jan 2016

I think with "permission" you mean "access level",
so your question/issue is duplicate, you missed this thread:
#8569

avatar Terrox
Terrox - comment - 4 Jan 2016

No I mean tag component permissions, not ACL on a tag.
This link /administrator/index.php?option=com_config&view=component&component=com_tags#permissions

avatar ggppdk
ggppdk - comment - 4 Jan 2016

hhmm, i miss-read your original post,
i thought you meant per indivudual tag permissions,

  • a per tag assignment ACL

i will test

avatar ggppdk
ggppdk - comment - 4 Jan 2016

Tested

I confirm the bug,

  • the "create" ACL of tag component is respected in the tags management,
  • but it is not used / respected in article edit form, in article edit form an editor is always allowed to create

but the edit permission is also broken in 3 ways
if the user is not given "edit" ACL then

  • the existing tag assigments are not shown, they should be shown as readonly
  • the user despite not having edit , user can still change them
  • if user does not change them, and just saves the form, the old tag assignments are lost

strange how these have escaped or are these recently introduced bugs ?

avatar andrepereiradasilva
andrepereiradasilva - comment - 21 Aug 2016

@ggppdk @Terrox i think this is solved in latest staging. can you confirm?

avatar ggppdk
ggppdk - comment - 21 Aug 2016

without testing now, I do remember that i had tested a PR that fixed checking "create" ACL for tags

avatar andrepereiradasilva
andrepereiradasilva - comment - 21 Aug 2016

ok i think it's solved by this #11211

avatar brianteeman
brianteeman - comment - 22 Aug 2016

I am closing this at this time as resolved by #11211 if that isnt the case it can always be reopened


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/8833.

avatar brianteeman brianteeman - change - 22 Aug 2016
Status New Closed
Closed_Date 0000-00-00 00:00:00 2016-08-22 19:46:06
Closed_By brianteeman
avatar brianteeman brianteeman - close - 22 Aug 2016

Add a Comment

Login with GitHub to post a comment