Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-23341

Incorrect role/policy subtree limitation handling in section/assign

    Details

      Description

      When a user/group has multiple roles assigned, and one of the roles has a subtree limitation, section/assign will not consider other (more permissive) roles/policies.

      Steps to reproduce:
      1. Create role 1: section, assign, NewSection( Standard , Media , Restricted )
      2. Create role 2: section, assign, NewSection( Standard , Media , Restricted )
      3. Create Folder 'TestFolder' under root, and article 'TestArticle' beneath.
      4. Create user 'TestUser' under group Editors
        1. Assign role1 to 'TestUser' with subtree limitation /TestFolder
        2. Assign role2 to 'TestUser' without limitations.
      5. Login with 'TestUser'
        1. Edit 'TestArticle', verify that modifying section works as intended.
        2. Edit other content outside of the '/TestFolder' path, verify that setting section does not work.

      The following will be displayed in error.log:

      [ Sep 12 2014 18:23:49 ] [127.0.0.1] :
      You do not have permissions to assign the section <Media> to the object <OtherArticle>.
      

        Issue Links

          Activity

          Transition Time In Source Status Execution Times Last Executer Last Execution Date
          Open Open Confirmed Confirmed
          37s 1 joao.inacio@ez.no 12/Sep/14 7:37 PM
          Confirmed Confirmed InputQ InputQ
          23m 20s 1 Paulo Lopes (Inactive) 12/Sep/14 8:00 PM
          InputQ InputQ Development Development
          2d 20h 2m 1 yannick.roger@ez.no 15/Sep/14 4:02 PM
          Development Development Development Review Development Review
          23h 34m 1 yannick.roger@ez.no 16/Sep/14 3:37 PM
          Development Review Development Review Development Review done Development Review done
          2h 2m 1 yannick.roger@ez.no 16/Sep/14 5:39 PM
          Development Review done Development Review done Documentation Review done Documentation Review done
          6s 1 yannick.roger@ez.no 16/Sep/14 5:39 PM
          Documentation Review done Documentation Review done QA QA
          15h 19m 1 rui.silva@ez.no 17/Sep/14 8:59 AM
          QA QA Closed Closed
          8h 59m 1 rui.silva@ez.no 17/Sep/14 5:58 PM
          Closed Closed Reopened Reopened
          23h 56m 2 rui.silva@ez.no 18/Sep/14 5:57 PM
          Reopened Reopened Closed Closed
          1m 51s 2 rui.silva@ez.no 18/Sep/14 5:57 PM

            People

            • Assignee:
              Unassigned
              Reporter:
              Joao Inacio (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 day
                1d