Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-21536

Content copy uses the 'content/create' permission, but ignores language limitation(s)

    XMLWordPrintable

Details

    Description

      The content copy operation does not have a specific access permission, instead relying on the content/create policy.

      However, when a given user only has permissions to create content in certain languages, it is still possible to create copies of content on any other languages.

      Steps to reproduce:
      • On an editor role, configure the content/create policy to be limited by a certain language (eng-GB).
      • Create a content object using a different language (fre-FR).
      • Using the editor account, it is possible to copy this content object, even if the limitations for content/create state otherwise.

      Attachments

        Activity

          People

            Unassigned Unassigned
            joao.inacio-obsolete@ez.no Joao Inacio (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 hours
                2h