#423 new
dleffler

Bug?: 'manage' permissions should imply 'all' permissions for assoc. object (and sub-elements)

Reported by dleffler | December 9th, 2011 @ 09:51 PM | in 2.0.3 (closed)

If a user/group is given 'manage' permission, they should have all permissions to that object and all its subordinate objects. Generally this is the case, but we should enforce it more strictly in the expFramework renderAction and expPermissions::check methods.

Comments and changes to this ticket

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Bug Tracker for Exponent CMS

Shared Ticket Bins

People watching this ticket

Referenced by

Pages