Details
-
Bug
-
Status: Needs priority
-
Normal
-
Resolution: Unresolved
-
None
-
None
-
None
-
3
-
Quasar
-
Puma Sprint 241, Puma Sprint 248
Description
Scenario:
- In EM for Experience Page create version1 and version2 by user A.
- Note that version 2 is the latest version and the document is locked by user A.
- Login with user B and try to restore version 1 created by user A.
Expected result: user B should not be able to override locked documents with version restore.
Actual result: user B overrides a locked document with version 1.
Problem
As a matter of fact, it is possible to restore a version in all cases where the document is supposed to be non-editable:
locked, outstanding (de)publication request, scheduled (de)publication, when xpage is part of a project and is in review...
And this is true also for documents in the content perspective.
Solution
Restoring a version must not be allowed, when the document:
- is locked
- has a request for (scheduled) publication or take offline that has not been accepted/reject yet
- is scheduled for publication or take offline
- is part of a project and is in review (project state is in review and document/page is not rejected)
- is part of a project that has status Approved
Changes needed for these cases:
- In CM: '+ Version' and 'Restore' button (for a selected previous version) must be hidden from the Versions tab in the xpage sidepanel
- In Content application: 'Restore' button hidden from the "Revision viewer"
- If implemented, in CM the 'Save as version' option on the Page menu must be disabled