Support

Support is part of Event Gallery Extended.

Please get a subscription if you need support. Feel free to use the ticket system or the contact form for reporting defects or pre-sale questions. Make sure you're logged in in order to be able to create a new ticket.

For general information you can also jump to the manual.

Subscribe now!

#2471 Category Permissions not applying

Posted in ‘Event Gallery - General’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Latest post by sbluege on Thursday, 08 December 2016 20:14 UTC

nobodyfamous
 I have a bug, and it was the same in Joomla.

If event category has set permissions to allow user group to edit, edit own, etc and component permissions set to not allow edit, edit own, etc. even though the Event is in the right category to allow the user to edit, they can not.

Steps to create;
  1. create new user group "testUser"
  2. create user "tester" and add to group "testUser"
  3. create new category "forUser" and set permissions on this category to allow for Create, Edit, Edit Own, Edit State
  4. log in to administration with "tester" and create a new event, save it under "forUser" category.
  5. the event will save, but now you can not edit it in any way.


I can not find the bug report/patch in joomla, but attached is my DIFF from GIT for the 2 files I applied the fix to for this same issue regarding articles and categories

Attachments

joomlaACLpatch.pdf

nobodyfamous
here is a link to the patch in GITHUB https://github.com/joomla/joomla-cms/pull/11511/files (better than the plain text file I attached)

sbluege
Hi,

thanks for the report! So far I'm not able to reproduce this.

1. create new user group "testUser"
2. create user "tester" and add to group "testUser"
3. create new category "forUser" and set permissions on this category to allow for Create, Edit, Edit Own, Edit State
4. log in to administration with "tester" and create a new event, save it under "forUser" category.
5. the event will save, but now you can not edit it in any way.

To allow the user to login to the backend I assigned him to the user group Managers as well. Then I allowed access to the component for the user group testUser. I created the Event, assigned it to the category forUser and was able to edit it in the backend. I'm pretty sure I missed something. Can you help me here please?

nobodyfamous
Thanks for trying, but assigning the user to managers is what caused the problem to not show up. AND I was not very clear, my fault. It was the end of the day...

Please remove "tester" (user) from the manager group.

Permissions for the new group "testUser" should be as follows;
Global Configuration -> Administrator Login, & Site Login allowed
Eventgallery -> Access Administration Interface allowed (NOT ANY OTHERS)

At this point, the user should be able to log in to back end, and see the Eventgallery, but not be able to add or edit anything. This is what I want.

Next, create a new Category in Eventgallery, "myEvent" and set the permissions of this category, for the group "test
User" to allowed for all (create, delete, edit, edit own, edit state)

So, now this should allow the user to do anything with events in this category. But, if the user creates an event (this works) the user can not edit that same event after it is saved.

sbluege
I see. You want to build a permission hierarchy based on categories? Unfortunately Event Gallery is build for single users or users with the same permissions in the backend. The ACL is implemented just extremely basic to control the access to Event Gallery. I guess what you found is a missing feature :(