Bug: 'create' permission should imply 'edit' permission also
Reported by dleffler | December 9th, 2011 @ 09:48 PM | in 2.0.3 (closed)
If a user has been given a 'create' permissions, it should be implied they also have 'edit' permission. Where the reverse it NOT always true, a may be able to edit existing content, but not add to it. And furtermore, 'delete' permission is separate from these.
Comments and changes to this ticket
-
dleffler December 9th, 2011 @ 09:52 PM
- Assigned user set to dleffler
Generally this is the case, but we should enforce it more strictly in the expFramework renderAction and expPermissions::check methods.
-
dleffler December 9th, 2011 @ 10:03 PM
This should also apply to the permission assignment side in the userperms & groupperms common actions as a toggle similar to how the administrate/manage toggle works.
-
expNinja December 9th, 2011 @ 10:49 PM
(from [325788e24a327e9f6cb936f096e05f339e653b60]) Selecting 'create' permission now also selects 'edit' permission on user/group permissions screens. It's a lot of code, but we have three different variations of the 'create' and 'edit' permission names [#422] https://github.com/exponentcms/exponent-cms/commit/325788e24a327e9f...
-
expNinja December 10th, 2011 @ 03:52 AM
(from [82cd30ebfe6d09061fb550c3abd64c194e38eccf]) Fixes populating 'create' permission disables/selects 'edit' permission on user/group permissions screens when loading saved permissions. [#422] https://github.com/exponentcms/exponent-cms/commit/82cd30ebfe6d0906...
-
expNinja December 13th, 2011 @ 06:06 AM
- Milestone set to 2.0.3
- Milestone order changed from 128 to 0
(from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Implements cascading page permissions (inherited), implements global sidebar permission restriction (doesn't pick up the page permissions which must now be explicitly set at the container or module), Also ensures the manage permission screens better reflect these implied and inherited permissions. Still needs work on cascading container permissions. [#420 #320 #415 #422 #423 #189 #86 milestone:2.0.3 owner:dleffler] https://github.com/exponentcms/exponent-cms/commit/5e1119a6619f5272...
-
dleffler December 13th, 2011 @ 06:09 AM
- State changed from new to resolved
-
expNinja December 17th, 2011 @ 04:46 PM
(from [c231f1dd8e2bdd0bd82f0961f56c563284399fbb]) New help docs now default to the version the site is set to instead of the 'current' database version. [#422 state:resolved milestone:2.0.3 ] https://github.com/exponentcms/exponent-cms/commit/c231f1dd8e2bdd0b...
-
expNinja December 20th, 2011 @ 12:54 PM
(from [e632ce739c08109e13ed658fc1761423a4ec79f8]) Changes to a correct algorithm (vs a kludge) for determining 'global' (non-sectional) modules to prevent their inheritance of page permissions. Also corrects create=edit permission logic. [#422 #215 #447 state:resolved owner:dleffler] https://github.com/exponentcms/exponent-cms/commit/e632ce739c08109e...
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Bug Tracker for Exponent CMS
People watching this ticket
Tags
Referenced by
- 415 Page admin cannot re-order text items (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 420 Bug: Page permissions don't seem to cascade to sub-pages (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 189 System-wide permissions (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 320 Global Container permissions (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 423 Bug?: 'manage' permissions should imply 'all' permissions for assoc. object (and sub-elements) (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 86 Permissions problems for Editors (from [5e1119a6619f52723be3b7aefffd347541f1bf5e]) Impleme...
- 447 Feature request - Add setting to determine permission flow for 'global' sidebar (from [e632ce739c08109e13ed658fc1761423a4ec79f8]) Changes...
- 215 Feature request - Restrict editing of "global" sidebar modules (from [e632ce739c08109e13ed658fc1761423a4ec79f8]) Changes...