Loading...
 
Skip to main content

respect/obey object permissions (beyond global) with plugin pivottable

  • Tracker item actions
Trackers
Items
Status
Closed
Subject
respect/obey object permissions (beyond global) with plugin pivottable
Version
17.x
Category
  • Conflict of two features (each works well independently)
  • Consistency
Feature
Permission
Wiki Plugin (extends basic syntax)
Resolution status
Fixed or Solved
Submitted by
Xavier de Pedro
Lastmod by
Xavier de Pedro
Rating
(0)
Description

respect/obey object permissions (beyond global) with plugin pivottable
To be reproduced in short.
Cases to be handled properly:
a) granted globally but restricted locally
b) granted only locally

Reproduced:
admin access:
http://xavi-9794-6148.show.tikiwiki.org
u: admin
p: 12345

Case a) granted globally but restricted locally
http://xavi-9794-6148.show.tikiwiki.org/tiki-index.php?page=Homepage+for+Staff
u: client1
p: client1
Group clients has global perms to view and edit wiki pages, but for that specific page, Clients can only see the page, and not edit it (managed through object perms).
However, user client1 currently can see the button to "Edit pivot table" (by mistake), while can't see the button to edit the wiki page (as expected). If the user clicks at edit pivot table, can change controls, but at saving time, nothing is changed (as expected, since he/she doesn't have perm on that page to edit it).

Case b) granted only locally
http://xavi-9794-6148.show.tikiwiki.org/tiki-index.php?page=Homepage+for+Staff
u: staff1
p: staff1
That page has object perms (not global) for group staff to view and edit. User staff1 can edit the page, but this user doesn't see the controls to edit the pivottable plugin.

Solution
Fixed in r60071. Thanks kroky6 and jonnyb
Importance
5
Easy to solve?
5
Priority
25
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
6148
Created
Tuesday 25 October, 2016 11:49:51 UTC
by Xavier de Pedro
LastModif
Thursday 27 October, 2016 11:30:05 UTC


Show PHP error messages