respect/obey object permissions (beyond global) with plugin pivottable
- Status
- Closed
- Subject
- respect/obey object permissions (beyond global) with plugin pivottable
- Version
- 17.x
- Category
- Consistency
- Conflict of two features (each works well independently)
- Feature
- Wiki Plugin (extends basic syntax)
Permission - Resolution status
- Fixed or Solved
- Submitted by
- Xavier de Pedro
- Lastmod by
- Xavier de Pedro
- Rating
- Description
respect/obey object permissions (beyond global) with plugin pivottable
To be reproduced in short.
Cases to be handled properly:
a) granted globally but restricted locally
b) granted only locallyReproduced:
admin access:
http://xavi-9794-6148.show.tikiwiki.org
u: admin
p: 12345Case a) granted globally but restricted locally
http://xavi-9794-6148.show.tikiwiki.org/tiki-index.php?page=Homepage+for+Staff
u: client1
p: client1
Group clients has global perms to view and edit wiki pages, but for that specific page, Clients can only see the page, and not edit it (managed through object perms).
However, user client1 currently can see the button to "Edit pivot table" (by mistake), while can't see the button to edit the wiki page (as expected). If the user clicks at edit pivot table, can change controls, but at saving time, nothing is changed (as expected, since he/she doesn't have perm on that page to edit it).Case b) granted only locally
http://xavi-9794-6148.show.tikiwiki.org/tiki-index.php?page=Homepage+for+Staff
u: staff1
p: staff1
That page has object perms (not global) for group staff to view and edit. User staff1 can edit the page, but this user doesn't see the controls to edit the pivottable plugin.- Solution
- Fixed in r60071. Thanks kroky6 and jonnyb
- Importance
- 5
- Easy to solve?
- 5
- Priority
- 25
- Demonstrate Bug (Tiki 19+)
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Version: Create show2.tiki.org instanceAbout show2.tiki.orgTo help developers solve the bug, we kindly request that you demonstrate your bug on a show2.tiki.org instance. To start, simply select a version and click on "Create show2.tiki.org instance". Once the instance is ready (in a minute or two), as indicated in the status window below, you can then access that instance, login (the initial admin username/password is "admin") and configure the Tiki to demonstrate your bug. Priority will be given to bugs that have been demonstrated on show2.tiki.org.
- Ticket ID
- 6148
- Created
- Tuesday 25 October, 2016 11:49:51 GMT-0000
by Xavier de Pedro - LastModif
- Thursday 27 October, 2016 11:30:05 GMT-0000
Attachments
| filename | created | hits | comment | version | filetype | ||
|---|---|---|---|---|---|---|---|
| No attachments for this item | |||||||
;){kind=link}
;){kind=link}
- Feature request: Be able to exclude (by category) the pages listed in Latest Changes module
- Add a command to console.php to invalidate certain objects in the search index
- Counting items in Items List Doesn't Work due to lack of , between items
- Modals in Quartz theme are too narrow
- Tracker Currency Field not working
;){kind=link}
;){kind=link}