Global permission Can list trackers (tiki_p_list_trackers) is not applied
- Status
- Open
- Subject
- Global permission Can list trackers (tiki_p_list_trackers) is not applied
- Version
- 23.x
25.x - Category
- Bug
- Consistency
- Feature
- Trackers
- Resolution status
- Confirmed
- Submitted by
- Bernard Sfez / Tiki Specialist
- Keep informed
- Jonny Bradley
- Lastmod by
- Bernard Sfez / Tiki Specialist
- Rating
- Description
We have a global permission tiki_p_list_trackers that should allow or deny groups to be able to see the list of trackers (tiki-list_trackers.php). This permission is only listed in the global permission (not object) so it is definitely all trackers.
Tested with a fresh Tiki25.x
See in the attached video:It seems this permissions is simply ignored.
- Visiting the tracker list page as anonymous I can see the tracker list page with an empty table.
What a un-happy UX/UI...When the is nothing to see, the user/visitor should clearly see nothing ? and eventually the reason he sees nothing. Not an empty table. - If you change the object permission "tiki_p_view_trackers" for a tracker, it will be listed.
Doesn't make sense to me.
See my suggestions in the Solution field below.- Visiting the tracker list page as anonymous I can see the tracker list page with an empty table.
- Solution
- When a group doesn't have "permission tiki_p_list" he simply shouldn't be able to see the table or page content, but a message You don't have permission to list the trackers.
- When user/visitor load tiki-list_trackers.php that lead to an empty table, he shouldn't see the table or page content but a message You don't have permission to list the trackers.
- Importance
- 6
- Easy to solve?
- 5
- Priority
- 30
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 7824
- Created
- Monday 13 September, 2021 05:21:33 UTC
by Bernard Sfez / Tiki Specialist - LastModif
- Tuesday 03 May, 2022 05:52:29 UTC