Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23341

Incorrect role/policy subtree limitation handling in section/assign

    XMLWordPrintable

Details

    Description

      When a user/group has multiple roles assigned, and one of the roles has a subtree limitation, section/assign will not consider other (more permissive) roles/policies.

      Steps to reproduce:
      1. Create role 1: section, assign, NewSection( Standard , Media , Restricted )
      2. Create role 2: section, assign, NewSection( Standard , Media , Restricted )
      3. Create Folder 'TestFolder' under root, and article 'TestArticle' beneath.
      4. Create user 'TestUser' under group Editors
        1. Assign role1 to 'TestUser' with subtree limitation /TestFolder
        2. Assign role2 to 'TestUser' without limitations.
      5. Login with 'TestUser'
        1. Edit 'TestArticle', verify that modifying section works as intended.
        2. Edit other content outside of the '/TestFolder' path, verify that setting section does not work.

      The following will be displayed in error.log:

      [ Sep 12 2014 18:23:49 ] [127.0.0.1] :
      You do not have permissions to assign the section <Media> to the object <OtherArticle>.
      

      Attachments

        Activity

          People

            Unassigned Unassigned
            joao.inacio-obsolete@ez.no Joao Inacio (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day
                1d