access-rights are not realized correctly / not fully realized
-------------------------------------------------------------
Key: MGNLDATA-24
URL: http://jira.magnolia.info/browse/MGNLDATA-24
Project: Magnolia Data Module
Issue Type: Bug
Affects Versions: 1.1
Environment: local as well as http://demoauthor.magnolia.info/
Reporter: Wolfgang Habicht
Assignee: Philipp Bracher
access-rights are incorrect
It seems that a user can modify the data repository even without having the
correct permissions. However changes will not succeed.
Too many options ('New Folder', 'New Item', 'Delete all', ...) are enabled.
reproducibility:
log in as administrator
create new role 'test' and configure as following:
Config: read only (selected and sub nodes) to
/modules/adminInterface/config/menu/data
Data: read only (selected and sub nodes) to /example
URL: get & post to /*
create new user 'dummy':
set only role /test
log out, log in as dummy
select in the menu 'Example' (in the only section Data)
--> I get the options 'New Folder', 'New Item', 'Delete all', 'Activate all'
and 'Deactivate all'
--> at least 'New Folder', 'New Item' and 'Delete all' should not be activated,
since read-only is configured
Click on 'New Item' --> the edit Window opens
enter name and comment
click on 'Save' --> the window reloads, but does not close. Also the entry is
not saved.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.magnolia.info/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------
