Page 1 of 1

Bug found, users are able to delete sub pages, without "remove page" permision

Posted: Tue Nov 11, 2008 6:26 pm
by Foden
I have a user that I set the following permisions for :

Add pages : true
Modify any page : false
Modify page structure : true
Remove pages : false

Then the user should be able to add pages, tell the system where in the structure it is located, but not remove pages!

I found out that this user is able to delete all subpages, only root pages are left as untouchable..

cms version is 1.4.1

/ Thomas

Re: Bug found, users are able to delete sub pages, without "remove page" permision

Posted: Thu Nov 20, 2008 10:18 am
by peterbus
I tested on my own site using only the right to Add pages.  All the rest is false.

So in your case turn off the right to modify pagestructure


Works!

Re: Bug found, users are able to delete sub pages, without "remove page" permision

Posted: Mon Nov 24, 2008 8:15 am
by Foden
The only problem to that solution, is that the users can not define where in the structure they want to put their pages! And that was the intention of giving them the right to modify page structure

/ Thomas

Re: Bug found, users are able to delete sub pages, without "remove page" permision

Posted: Mon Nov 24, 2008 8:16 am
by Foden
The only problem with that solution, is that the users can not define where in the structure they want to put their pages! And that was the intention of giving them the right to modify page structure

/ Thomas