Details
-
Bug
-
Resolution: Won't Fix
-
High
-
4.7.0, 5.0, 5.1
-
None
Description
The content copy operation does not have a specific access permission, instead relying on the content/create policy.
However, when a given user only has permissions to create content in certain languages, it is still possible to create copies of content on any other languages.
Steps to reproduce:
- On an editor role, configure the content/create policy to be limited by a certain language (eng-GB).
- Create a content object using a different language (fre-FR).
- Using the editor account, it is possible to copy this content object, even if the limitations for content/create state otherwise.