Re: Page doesn't appear in list when no write access rights

[Benjamin . Papez]

There definitely is an inconsistency here:
If the list entry is a LINK to a non-validated page, the entry will be displayed in preview, compare and edit mode, but the user doesn't have write access to the page, too. If the user without write access clicks on the link the logon screen appears.

I would like the same behaviour not only for LINKS, but also for pages created within the container. The user creating the container has write access to the container and should always see the container entries in the list and be able to update or delete the container. When he has no write access to the page within the container and he clicks on the link, then he should either just see a validated page, the logon screen or alternatively an error message.

As for validating: if the list screen is validated, and some pages within the container list are not validated, they should not be displayed in LIVE mode. They should be displayed in LIVE mode only after they are validated.

Greetings,
Ben

Romain ARNAUD <[EMAIL PROTECTED]> wrote on 20.07.2004 09:07:32:

> Hi,
>
>   It is my understanding that since the page as not been validated in
> the workflow, it is only available to those who have a write access to
> it (in preview, compare or edit mode).
>   Once you'll have validated the modifications in the workflow menu,
> your user should be able to see the container in live mode.
>
> Cheers,
>
> Romain
>
> --- [EMAIL PROTECTED] a �crit : > Hello!
> >
> > This  is my scenario:
> > User "PartnerAdmin" creates a container "partner". One field in the
> > container is the "partnerPage", for which we automatically set the
> > ACL. In
> > this partner page the user "PartnerAdmin" should not have rights to
> > WRITE,
> > as this will be maintained by the users of the partner. Now the
> > problem is
> > that the "partner" is not shown in the container list after being
> > added.
> >
> > This can be also recreated in your demo:
> >
> > Log on with user steven.
> > Go to KBase -> Marketing. Click on Add information. Create a new
> > Jahia
> > page, called "Test".
> >
> > Log on with user root.
> > Go to KBase -> Marketing. Click on "Test" in the list. In the new
> > page,
> > open the Page Properties and take away the Write Rights for user
> > steven.
> >
> > Log on with user steven.
> > Go to KBase -> Marketing. The "Test" page is not displayed in the
> > list,
> > just because user steven has no write rights.
> >
> >
> > The code, which causes this scenario, is in
> > org.jahia.services.pages.ContentPage in method getPage
> > (EntryLoadRequest,
> > String , JahiaUser):
> >
> > ...
> > if (!operationMode.equals (ParamBean.NORMAL)
> >    && !operationMode.equals (ParamBean.COMPARE)) {
> >    // only return page in edit or preview mode if we have write
> >    // access to it.
> >    if (!page.checkWriteAccess (user)) {
> >        // instead let's try to get the page in ACTIVE mode.
> >        if (page.checkReadAccess (user)) {
> >            // let's check if the page has active entries first.
> >
> >            // NK : EDIT_MODE_PAGE_ACCESS_ISSUE
> >            // Edit Mode allowed even the user has no write access on
> > page
> >            /*
> >            if (!this.hasActiveEntries()) {
> >                return null;
> >            }*/
> >
> >            EntryLoadRequest activeLoadRequest = new EntryLoadRequest
> > (
> >                EntryLoadRequest.ACTIVE_WORKFLOW_STATE, 0,
> >                loadRequest.getLocales ());
> >            if (this.getTitle (activeLoadRequest) == null) {
> >                return null;
> >            }
> >        page =
> >            new JahiaPage (this, this.getPageTemplate
> > (activeLoadRequest),
> >                this.getACL (), activeLoadRequest);
> >        }
> >    }
> > ...
> >
> > Why is this check there? Is it still somehow possible to display the
> > entry
> > in the list, although the "PartnerAdmin" will only be able to read
> > the
> > page?
> >
> > Regards,
> > Benjamin Papez
> >  
>
>
>    
>
>    
>      
> Cr�ez gratuitement votre Yahoo! Mail avec 100 Mo de stockage !
> Cr�ez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/
>
> Dialoguez en direct avec vos amis gr�ce � Yahoo! Messenger !
> T�l�chargez Yahoo! Messenger sur http://fr.messenger.yahoo.com