Permissions Problem with CMSMS 1.0.4?

[slloyd]

I have two writers accessing one site. Neither have permissions to delete ANYTHING, YET the one writer deleted all the content of the other writer! How is this possible? Do these permissions not work?! Is there any way of recovering the content? How can I prevent this from happening again?

I think it goes without saying that I am extremely pissed. 

[calguy1000]

okay, since you're extremely pissed (either drunk or angry, I'm not sure which).  I'll wait a couple of days until you have sufficient focus and concentration abilities to supply enough detail for me (or somebody else) to hopefully answer your questions.

[Elijah Lofgren]

Basically, can you tell us what permissions you had checked for each of your writers. That will help narrow down the problem. Once we know exactly how to duplicate your problem, we will be able to try to fix it.

Was it just page content that had this issue?

What were the exact permissions of the users?

Sadly, I don't think there is a way to get the content back. If your site is crawled I would see if Google has a cache of it.
In addition I would consider implementing a daily backup cron for your database, such as the script available here: http://forum.cmsmadesimple.org/index.ph ... 472.0.html

Sorry about your loss of content. Losing stuff is indeed very annoying.

- Elijah

[slloyd]

Thanks for your help, Elijah.

Here are the permissions I have checked for both writers:

Add GCBs
Add Pages
Modify Files
Modify News
Modify Page Structure

She deleted the pages -- not just the content in each page. She doesn't have access to click on and edit a page; that, at least, is working. But she was able to click on the trash can to delete the page, as well as check the box and hit Submit to delete it.

Luckily, I was able to get the cache from Google and re-create the pages.

[pishkus]

It's because of the permission to 'Modify page structure'. I have the same issue. The delete icons are shown and functioning.

[Elijah Lofgren]

Hmm.. http://forum.cmsmadesimple.org/index.ph ... 494.0.html

It seems we need a "Delete Page" permission.

I know permissions are supposed to be improved whenever CMSMS 2.0 comes out, but I don't know that status on that.

[slloyd]

Yes, that new "Modify Page Structure", which wasn't in previous versions, is the problem. I just figured that out now that I've had a chance to play with it. The problem is, to give them JOINT access to any existing pages, I have to go into each one and give them editing access. What a pain! In previous versions, the delete icons were present; they just didn't work.

Yes, I sure do hope this will be in the upgrade. I thought by not checking "Remove Pages", I would be covered.

Ugh, the thought of going into every site and changing permissions and altering editing access...

Thanks for your help, Elijah.

[Elijah Lofgren]

Ugh, the thought of going into every site and changing permissions and altering editing access...

Thanks for your help, Elijah.

You're welcome. Sorry about that drudgery. Hopefully things will be improved in future CMSMS versions.

I hope you have a good weekend,

Elijah

[slloyd]

One major problem with not checkign the "Modify Page Structure" is then they can't order their pages, and they don't have the easy option for making content inactive. Urgh! I hope the change to this comes soon!

Thanks, you have a good weekend, too.