Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Action Available to Access even though User Doesn't have Perms #7357

Closed
modxbot opened this issue Mar 13, 2012 · 2 comments
Closed

Action Available to Access even though User Doesn't have Perms #7357

modxbot opened this issue Mar 13, 2012 · 2 comments
Labels
bug The issue in the code or project, which should be addressed. type-frontend Issues related to UI/UX issues, mostly about styles and frontend implementations on JavaScript.
Milestone
Revolution-2.2.1-pl

Comments

@modxbot
Copy link
Contributor

modxbot commented Mar 13, 2012

smashingred created Redmine issue ID 7357

In Revo 2.2 when a user doesn't have access via Access Policy to do an action as an example to access their own user account by clicking on the username. The link to access the action should not be live. Currently the link to access the user account is live and then the user is confronted with the "Error! Access Denied" page. If a user doesn't have access to the action (i.e. update user record) the link/button to trigger it should be disabled and the user should never be able to get to the "Error! Access Denied." page.

See the video linked here: http://screencast.com/t/heQ7mhQo
@MarkH
Copy link

MarkH commented Mar 14, 2012

markh submitted:

Having the context clickable (in the resources tree) when there's no permission for it is probably a good example of this too..

@splittingred
Copy link

splittingred submitted:

Fixed: 5ddf860

enigmatic-user pushed a commit to enigmatic-user/revolution that referenced this issue Feb 13, 2014
[modxcms#7357] Prevent viewing of Profile if user does not have chang…
5ddf860 
…e_profile permission
enigmatic-user pushed a commit to enigmatic-user/revolution that referenced this issue Feb 13, 2014
[modxcms#7357] Add else check to profile link in header to at least d…
1f4a0ca 
…isplay name
enigmatic-user pushed a commit to enigmatic-user/revolution that referenced this issue Feb 13, 2014
[modxcms#7357] Prevent viewing of Profile if user does not have chang…
537b63e 
…e_profile permission
enigmatic-user pushed a commit to enigmatic-user/revolution that referenced this issue Feb 13, 2014
[modxcms#7357] Add else check to profile link in header to at least d…
9484216 
…isplay name
enigmatic-user pushed a commit to enigmatic-user/revolution that referenced this issue Feb 13, 2014
Merge remote-tracking branch 'enigmatic-user/german_translation' into…
6e55ecf 
… release-2.2

* enigmatic-user/german_translation:
  Translated the newest phrases to German (formcustomization.inc.php, setting.inc.php)
  [modxcms#6496] Fix quick edit modal windows for elements on smaller screens.
  [modxcms#6501] Fix SuperBoxSelect selections spanning multiple rows
  [modxcms#6687] Fix duplicated OK buttons in MODx.Console in certain situations
  [modxcms#6864] Fix rare issue where primary group is not set for user, and custom dashboard for their group does not propagate
  [modxcms#7011] Prevent infinite recursion error in modElement::isStaticSourceMutable
  Fix change profile link
  Add MODX favicon.ico to site root for default in sites
  [modxcms#7389] Prevent error when input is shorter than truncate length in ellipsis filter
  [modxcms#7364] Better checking for default sort on file browser
  [modxcms#7357] Add else check to profile link in header to at least display name
  [modxcms#7333] Prevent error when id is undefined in resource edit controller
  [modxcms#7364] Add setting to set default sort field of MODx.Browser view
  [modxcms#7363] Check for this.stateful in MODx.tree.Tree::_saveState
  Add missing index to modSession.access
  [modxcms#7357] Prevent viewing of Profile if user does not have change_profile permission
  [modxcms#7322] Fix issue where certain regions were not able to be hid via FC; clarified FC set labels
  [modxcms#7362] Fix issue with conflicting FC Sets when User belongs to more than one User Group with a Set
  Translated newest phrases to German, improved the translation of some of the existing phrases
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug The issue in the code or project, which should be addressed. type-frontend Issues related to UI/UX issues, mostly about styles and frontend implementations on JavaScript.
Projects
None yet
Milestone
Revolution-2.2.1-pl
Development

No branches or pull requests
3 participants
@MarkH @splittingred @modxbot