When on a wiki page on my tiki, I have the options available to watch the specific page or to "Monitor the sub-structure". When clicking on the latter, I am redirected to a permission denied page and the watch for the sub-structure is not set.
Even admin is being denied the permission to set a sub-structure watch on a wiki page.
Setting a watch on a sub-structure inside the structure-admin menu works fine for any permitted, though.
On version 4.1 the following code can be found in tiki-index.php line number 411:
if (($_REQUEST['watch_action'] == 'add_desc' || $_REQUEST['watch_action'] == 'remove_desc') && $objectperms->watch_structure ) { $access->display_error( $page, tra('Permission denied'), '403'); }
If i am not mistaken, $objectperms->watch_structure should return true, if the rights are given to watch the structure. So having the rights AND requesting a watch will result in permission denied, which is basicly the opposite of the intended.
The following code works for me an should be the appropriate fix (as mentioned, if I am not mistaken).
if (($_REQUEST['watch_action'] == 'add_desc' || $_REQUEST['watch_action'] == 'remove_desc') && !$objectperms->watch_structure ) { $access->display_error( $page, tra('Permission denied'), '403'); }
$objectperms->watch_structure simply negated.
To help developers solve the bug, we kindly request that you demonstrate your bug on a show2.tiki.org instance. To start, simply select a version and click on "Create show2.tiki.org instance". Once the instance is ready (in a minute or two), as indicated in the status window below, you can then access that instance, login (the initial admin username/password is "admin") and configure the Tiki to demonstrate your bug. Priority will be given to bugs that have been demonstrated on show2.tiki.org.
filename | created | hits | comment | version | filetype | ||
---|---|---|---|---|---|---|---|
No attachments for this item |