Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updating Member Roles CP Access Settings while using Multiple Site Manager overwrites channel access permissions #1087

Closed
melbazany opened this issue May 19, 2021 · 1 comment · Fixed by #1088
Labels
Bug: Accepted Bug has been confirmed, is reproducible, and ready to work on. EE6

Comments

@melbazany
Copy link

EE 6.0.4:

Using MSM (multiple site manager) (for reference, Site A and Site B).

  1. While on Site A, logged in as Super Admin: Navigating to Roles > Select "Content Administrator" > CP Access tab.
  2. Scroll to "Channel Access" and Check All. **See attached screenshot here - the parent checkbox for the channel is not checked when I go to update the Channel access permissions for the Content Administrator role, but all of its children ARE checked. **
  3. Update 'Allowed upload directory access' by checking all File upload directories for permission to access. These are all unchecked when I navigate to the Role settings.
  4. Save Role Permissions.
  5. Log in as a Content Administrator and access CP on Site A.
  6. Attempt to view and edit an entry from all available channels on Site A and am able to do so successfully.
  7. Using the CP toggle, navigate to Site B.
  8. Click on Entries on the side navigation bar in the CP.
  9. Click on any entry listed. Met with "Error: You are not authorized to access this page".
  10. While still on Site B, log out of Content Administrator user, and log back into the site as a Super Admin.
  11. Navigate to Roles > Select "Content Administrator" > CP Access tab.
  12. Scroll to "Channel Access" and Check All. **See attached screenshot here - the parent checkbox for the channel is not checked when I go to update the Channel access permissions for the Content Administrator role, but all of its children ARE checked. **
  13. Update 'Allowed upload directory access' by checking all File upload directories for permission to access. These are all unchecked when I navigate to the Role settings.
  14. Save Role Permissions.
  15. Log out of site, and log back into site as a Content Administrator.
  16. Attempt to view and edit an entry from all available channels on Site B, and am able to do so successfully.
  17. Using the CP toggle, navigate back to Site A.
  18. Click on Entries on the side navigation bar in the CP.
  19. Click on any entry listed. Met with "Error: You are not authorized to access this page".
  20. Navigate back to Site B.
  21. Attempt to view and edit an entry from all available channels on Site B and am able to do so successfully. Toggle back to Site B - all channel entries met with "Error: You are not authorized to access this page".

TLDR: Whichever Site from the MSM that you save the Role Permissions on last is the only site that Content Administrators can access Channel Entries on. It seems as though File Directory permissions ('Allowed upload directory access') aren't being saved properly either (as they're always unchecked when I re-enter the Role Permissions settings), but I can still successfully upload to those as needed.

See attached screenshot for referenced issue of the parent checkbox not being checked when I go to update the Channel access permissions for the Content Administrator role.

Screen Shot 2021-05-19 at 2 28 32 PM

@ops-andy ops-andy added Bug: Unconfirmed Bug report that is not yet confirmed and/or is not reproducible. EE6 under review An EE team member is reviewing this issue Bug: Accepted Bug has been confirmed, is reproducible, and ready to work on. and removed Bug: Unconfirmed Bug report that is not yet confirmed and/or is not reproducible. under review An EE team member is reviewing this issue labels May 19, 2021
@ops-andy
Copy link
Contributor

I couldn't follow it step by step, but I was able to verify the TLDR. Whichever Site from the MSM that you save the Role Permissions on last is the only site that Content Administrators can access Channel Entries on.
we'll work on a fix for this ASAP.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug: Accepted Bug has been confirmed, is reproducible, and ready to work on. EE6
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants