Page 1 of 1

User can delete admin pages

Posted: Wed Dec 26, 2007 5:19 pm
by ecuapac
Hallo!

  I am using CMS Made Simple version 1.2.2.

I have two users set up: The "admin" and a "user".
The "user" is member of only group "Editors" and this group has only the following permissions:
"Add pages" and "Modify Page Structure".

If I log in now as "user" I can delete pages owned by "admin". Why?

If I give permission "Add pages" only to the "Editors"-group "user" cannot see pages owned by "admin". OK!
I'd like a nomral user to modify the page structure but not to be able to delete pages set up by "admin".

Thanks in advance!
  Ralph

Re: User can delete admin pages

Posted: Wed Dec 26, 2007 8:16 pm
by reneh
As far I remember the "Modify Page Structure" gives the right to reorder, modify, hide and delete pages.
So to prevent editors from deleting other users pages you must remove this right. You can explicit add users as editors to spesific pages.
In the 1.x branch its no way to see and edit but not delete pages (as far I know). In 2.x we try to change the permission stuff to make it much more flexible.