-
Bug
-
Resolution: Invalid
-
Major
-
4.4.0
-
None
-
4.5 RC2
How to reproduce
- Go to the demo or project version: 4.4.0RC3
- On your site have two rights profiles:
- one that has the right to delete a file from the resource explorer
- and the other not
- Go to the assignment of rights
- Give the right to your user on the general context with the right profile who does not have the right to delete a file from the resource explorer
- Next, go to the resource rights context, add the user and assign him the two rights profiles. (The one who has the right to modify and the one who does not.)
- Connect to the user's back office to check the assignment of rights
The user cannot delete the folder even though he has the rights to it.
(However I succeeded, if I add at the level of the general context to the user the profile to be able to delete the folder.
There the user will have the right to delete the folder.)
For performance issue, the rights are checked on general context for all explorer buttons
<right context-prefix="/cms">Plugin_Explorer_Folder_Delete</right>
So the rights should be affected on general context and on resources.
Note that affecting the rights on general context only allow to have the button. The button will be disabled if the user has no right on current folder.