Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-22456

Roles and Policies assigned to parent user group not inherited

    Details

      Description

      assigning users to a customized group will not propagate the roles defined for that group.

      case example:

      environment required:

      • remove the read - Section(standard) policy from the anonymous role
      • copy the user_group class to a custom class named "custom_group"

      test:

      • open users/members in admin
      • Create a new "custom_group" under the member's group (named "cutoff group")
      • create a new user under "cutoff group"
      • create some test article named "readme"
      • create a new role "just read", add policy content read "No limitations"
      • assign "just read" to "cutoff group"

      in frontend SA with legacy_mode to false:

      • log in to front of site using the created user
      • ignore the error, open direct url http://site.com/readme
        403 error is shown
        the user does not have the permissions from group, should have the "just read" role
      • in admin, add the "just read" role to the user itself
      • reload frontend, now user has access

        Issue Links

          Activity

          Show
          Petar Spanja (Inactive) added a comment - Pull request: https://github.com/ezsystems/ezpublish-kernel/pull/774
          Show
          Petar Spanja (Inactive) added a comment - Fixed in ezpublish-kernel/master: https://github.com/ezsystems/ezpublish-kernel/commit/91113c2995173b2aba5cfc6637e2f6964898cd14
          Hide
          Eduardo Fernandes (Inactive) added a comment -

          QA Approved

          Show
          Eduardo Fernandes (Inactive) added a comment - QA Approved

            People

            • Assignee:
              Unassigned
              Reporter:
              Paulo Bras (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 hours, 45 minutes
                4h 45m