Security Tab Displays When it Shouldn't

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
10/10/2013 3:38:03 PM
Gravatar
Total Posts 19

Security Tab Displays When it Shouldn't

Hey Joe,

I was setting up permissions on a site with a large number of Roles on it(23 roles). I then started to test the Feature Instance Settings for my "Content Publishers" roles and noticed that they still had the "Security" tab even though they didn't have access to change anything in the tab. When a Content Publisher tries to change anything in the "Security" tab, the user gets an Access Denied message. I though it was strange that they could still see the tab. So I logged into another site that has only the minimum number of roles set up(7 roles). A Content Publisher on a site with the lesser number of roles dose not even see the "Security" tab.

I tested this on my local Mojoportal site just to confirm. When the minimum number of roles set up the "Security" tab in the Feature Instance Settings was once again hidden from a Content Publisher. However with a large number of roles, I used 20 this time. The Content Publisher could see the "Security" tab though they could not make changes to it. 

I was wondering if this was happening because of the way that Mojoportal changes some of the selection methods for larger Role pools? For example how the drop down menu just because a link to a list on another page. 

This also seems to come into play on the "Page Settings" "Security" tab as well. Content Publishers viewing the "Security" tab in the Page Settings can also see the tab its self, but all of the options under it are grayed out and not clickable.

I did look though the forums for a while to see if anyone else found a working solution to this, to get the site a little more uniform. 

Thanks for any information you have about it!

10/11/2013 1:11:08 PM
Gravatar
Total Posts 18439

Re: Security Tab Displays When it Shouldn't

Hi,

Thanks for the bug report. I agree the security tab in feature settings and page settings should only be shown for admins, content admins, and site editors (site editors is only applicable in a multi site installation that uses related sites mode). 

This is now fixed in the source code repository so it will be fixed in the next release.

Best,

Joe

You must sign in to post in the forums. This thread is closed to new posts.