Uploaded image for project: 'CMS'
  1. CMS
  2. CMS-7870

Inconsistent hierarchical rights

    • Icon: Bug Bug
    • Resolution: Cannot Reproduce
    • Icon: Major Major
    • 4.2.0
    • 4.0M12
    • None
    • None

      See the example in the screenshot.

      We have :
      Sitemap
      |_ intermédiaire
        |_ intermédiaire2

      • The sitemap is allowed to anonymous.
      • intermédiaire is denied to any connected user (so anonymous too, but just as a consequence).
      • There is no assignment storage on intermédiaire2, but the tool displays it as allowed to anonymous (because the parent page has no assignment in anonymous so it looks in the sitemap), whereas it should be denied to any connected user and so to anonymous.

      We have to check if it is a bug only in the tool visualisation, or also in the check of rights, which would be a huge security issue.

          [CMS-7870] Inconsistent hierarchical rights

          Indeed

          Simon Prieul (Inactive) added a comment - Indeed

          I think the issue does not exist anymore because you cannot create the situation you describe anymore.
          On node 'intermidaire' I cannot allow "any connected user" without previsouly explicitly forbid anonymous

          Raphaël Franchet added a comment - I think the issue does not exist anymore because you cannot create the situation you describe anymore. On node 'intermidaire' I cannot allow "any connected user" without previsouly explicitly forbid anonymous

            laurence Laurence Aumeunier
            sprieul Simon Prieul (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: