User can delete admin pages

For questions and problems with the CMS core. This board is NOT for any 3rd party modules, addons, PHP scripts or anything NOT distributed with the CMS made simple package itself.
Locked
ecuapac

User can delete admin pages

Post by ecuapac »

Hallo!

  I am using CMS Made Simple version 1.2.2.

I have two users set up: The "admin" and a "user".
The "user" is member of only group "Editors" and this group has only the following permissions:
"Add pages" and "Modify Page Structure".

If I log in now as "user" I can delete pages owned by "admin". Why?

If I give permission "Add pages" only to the "Editors"-group "user" cannot see pages owned by "admin". OK!
I'd like a nomral user to modify the page structure but not to be able to delete pages set up by "admin".

Thanks in advance!
  Ralph
reneh
Dev Team Member
Dev Team Member
Posts: 446
Joined: Tue Nov 28, 2006 8:39 pm

Re: User can delete admin pages

Post by reneh »

As far I remember the "Modify Page Structure" gives the right to reorder, modify, hide and delete pages.
So to prevent editors from deleting other users pages you must remove this right. You can explicit add users as editors to spesific pages.
In the 1.x branch its no way to see and edit but not delete pages (as far I know). In 2.x we try to change the permission stuff to make it much more flexible.
ReneH 8-)
A search will save you hours waiting for an answer! Image
Locked

Return to “CMSMS Core”