View Permissions fail to override parent/ancestor permissions #1167

Closed
srj55 opened this Issue Feb 10, 2012 · 5 comments

Projects

None yet

6 participants

@srj55
Contributor
srj55 commented Feb 10, 2012

I have a CMS page called "Secure Content" and I assign a group "Secure" to this page and its decedents. Now, I have a page somewhere inside this node called "Top Secret" and I want to assign the group "TopSecret" here. The "Secure" group can still access this.

The view permissions don't supercede parent/ancestor permissions.

Version: 2.2 release

@kezabelle
Contributor

Are you able to try this same scenario using the develop branch? A number of permissions/menus changes have been applied there, that may be relevant for diagnosing if this is an issue.

@FrankBie
Contributor

Works like designed, you have given the Secure group the access to descendants, and Top Secrect is a descendant.
There is currently no superceden, as groups are always on the same level of hierachy, and you give a group permissions to certain pages

Try page children /Secured/Secret/TopSecret - Secured (access to page+children = secured and secured/secret but not topSecret

@evildmp evildmp was assigned Jun 15, 2012
@ojii
Collaborator
ojii commented Aug 3, 2012

Bumped to 2.4, Design Decision Needed.

@digi604
Member
digi604 commented Jul 11, 2013

could we add a boolean field to indicate: overwrites everything else?

@evildmp evildmp was unassigned by digi604 Feb 10, 2014
@digi604
Member
digi604 commented Feb 10, 2014

closed as @FrankBie describes the correct way

@digi604 digi604 closed this Feb 10, 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment