Skip to content

EE6 - Limited access to template variables gives unlimited access to system templates #3667

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
jcogs-design opened this issue Aug 5, 2023 · 0 comments · Fixed by #3672
Closed

EE6 - Limited access to template variables gives unlimited access to system templates #3667

jcogs-design opened this issue Aug 5, 2023 · 0 comments · Fixed by #3672

Comments

@jcogs-design
Copy link
Contributor

Description of the problem
If you give a member role access to just "template variables" when they view CP they also see the "Template Group" listing (reporting no templates found) and the system templates (which it appears they can edit)

Screenshots / Videos / Template Code
image

Environment Details:

  • Version: 6.4.13
  • PHP Version 8.0.29

Possible Solution
Not showing the redundant elements / not giving edit access to system templates.
intoeetive added a commit that referenced this issue Aug 8, 2023
@intoeetive
Resolved #3667 where all members with access to Template Manager coul…
bca245a 
…d access System Templates
@intoeetive intoeetive mentioned this issue Aug 8, 2023
Merged
intoeetive added a commit that referenced this issue Aug 8, 2023
@intoeetive
Resolved #3667 where all members with access to Template Manager coul…
391e1ae 
…d access System Templates

(cherry picked from commit bca245a)
@intoeetive intoeetive mentioned this issue Aug 8, 2023
Merged
bryannielsen added a commit that referenced this issue Aug 15, 2023
@bryannielsen
Merge pull request #3672 from ExpressionEngine/bug/7.x/system-templat…
06be9e8 
…e-access

Resolved #3667 where all members with access to Template Manager could access System Templates
bryannielsen added a commit that referenced this issue Aug 15, 2023
@bryannielsen
Merge pull request #3673 from ExpressionEngine/bug/6.x/system-templat…
5bb0784 
…e-access

Resolved #3667 where all members with access to Template Manager could access System Templates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
1 participant
@jcogs-design