Uploaded image for project: 'eZ Platform Enterprise Edition'
  1. eZ Platform Enterprise Edition
  2. EZEE-2697

Save/Delete draft shouldn't be displayed if user doesn't have proper policies

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: High
    • Resolution: Fixed
    • Affects Version/s: 2.4.1
    • Fix Version/s: 2.5.0-rc1, 2.4.3
    • Component/s: None
    • Labels:

      Description

      Preconditions:

      Second language added to app.

      Steps:

      1. Update Editor's role:

      • User/Login
      • Content/Create
      • Content/Reverserelatedlist
      • Content/Read
      • Content/Versionread
      • Assignmnents: no limitations

      2. Log in as an Editor
      3. Go to Page/site
      4. Click [+] and select Landing Page

      Actual result:

      Save draft/ Delete draft are visible in dropdown menu, but if user click them he receives an 403 error.

      Expected result:

      Save draft in dropdown menu should not be visible, because user doesn't have Content/Edit policy.
      Delete draft should not be visible, because user doesn't have Content/Versionremove policy.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              barbara.grajczyk@ez.no Barbara Grajczyk
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: