Issue Details (XML | Word | Printable)

Key: BCMS-115
Type: Bug Bug
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Savvas Triantafyllou
Reporter: Savvas Triantafyllou
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
BetaCMS

BetaCMS Web Console does not restrict access when user is creating new content objects and has not been assigned roles ROLE_CMS_EDITOR or ROLE_CMS_PORTAL_EDITOR

Created: 08/Nov/09 05:41 PM   Updated: 08/Nov/09 05:46 PM
Component/s: betacms-webui
Affects Version/s: 2.1.0.CR1
Fix Version/s: 2.1.0.CR2

Time Tracking:
Not Specified


 Description  « Hide
When user is creating a new content object and she has not been assigned role ROLE_ADMIN or role ROLE_CMS_WEB_SITE_PUBLISHER, an extra check should be conducted depending on edited content object type.

If content object type is one of

portalObject, portalSectionObject, dynamicContentAreaObject and scheduledContentAreaObject

then user must have role ROLE_CMS_PORTAL_EDITOR in order to be able to save content object.

If content object type is not one of the above types then user must have role ROLE_CMS_EDITOR in order to be able to save content object.

 All   Comments   Work Log   Change History      Sort Order: Ascending order - Click to sort in descending order
Savvas Triantafyllou added a comment - 08/Nov/09 05:46 PM
Note that in either cases, user must have role ROLE_CMS_EDITOR in order to actually save a content object.

Therefore rule for creating new content through BetaCMS Web Console is :

User must be assigned role ROLE_CMS_EDITOR. In case type of new content object is one of
portalObject, portalSectionObject, dynamicContentAreaObject and scheduledContentAreaObject
then she must also be assigned role ROLE_CMS_PORTAL_EDITOR.

Committed revision 3870 - beatcms-webui