Bug found, users are able to delete sub pages, without "remove page" permision

[Foden]

I have a user that I set the following permisions for :

Add pages : true
Modify any page : false
Modify page structure : true
Remove pages : false

Then the user should be able to add pages, tell the system where in the structure it is located, but not remove pages!

I found out that this user is able to delete all subpages, only root pages are left as untouchable..

cms version is 1.4.1

/ Thomas

[peterbus]

I tested on my own site using only the right to Add pages.  All the rest is false.

So in your case turn off the right to modify pagestructure


Works!

[Foden]

The only problem to that solution, is that the users can not define where in the structure they want to put their pages! And that was the intention of giving them the right to modify page structure

/ Thomas

[Foden]

The only problem with that solution, is that the users can not define where in the structure they want to put their pages! And that was the intention of giving them the right to modify page structure

/ Thomas