Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-7875

A readonly user is able to translate the document in a restricted folder

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Top
    • Resolution: Fixed
    • 2.26.00
    • 2.26.04
    • None
    • Sprint 77, Sprint 83

    Description

      Prerequisites
      1. Remove the value editor from property hipposys:groups @ /hippo:configuration/hippo:domains/hippodocuments/hippo:authrole
      2. Add a new node authrole with property hipposys:groups = editor, hipposys:role = readonly @ /hippo:configuration/hippo:domains/hippodocuments (screenshot 1)
      3. Remove editor from hipposys:groups @ /hippo:configuration/hippo:domains/hippofolders/hippo:authrole
      4. Add editor in hipposys:groups @ /hippo:configuration/hippo:domains/hippofolders/readonly
      5. Remove cms.privileges = hippo:author @ /hippo:configuration/hippo:frontend/login/login/loginPage

      Steps
      1. Login to CMS as editor
      2. Navigate to document folder and select any folders context menu
      3. Editor will see No actions available (as expected) this proves restriction applied on editor to have readonly access on folders works
      4. Now select any document, notice that all the document options like edit, document, view, share are missing. This is as expected and proves restriciton applied on editor to have readonly access on documents works

      Not expected to see is translatable option, with this option - editor is able to translate a new document in restricted folder. (refer screenshot 2)

      Attachments

        1. CMS7-7875-screenshot1.png
          46 kB
          Junaidh Kadhar Sheriff
        2. CMS7-7875-screenshot2.png
          194 kB
          Junaidh Kadhar Sheriff

        Activity

          People

            jsheriff Junaidh Kadhar Sheriff
            jsheriff Junaidh Kadhar Sheriff
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: