I was surprised to find that to allow a user to add a blog post, they had to be in a role that had permissions to edit the page the blog was on. Without this permission, they have no "add post" link, though they can edit individual existing posts.

Is this how it should be, or a bug?

thanks

mojoPortal Version                                2.3.7.5                MSSQL           Operating System                Microsoft Windows NT 6.0.6002 Service Pack 2

ASP.NET Info                v4.0.30319 Running in Full Trust

Server Time Zone                GMT Standard Time

Server Local Time                (GMT 0) 11/01/2012 16:15:38

Greenwich Mean Time (GMT/UTC)                11/01/2012 16:15:38

I've looked into this a little more, and I think it may affect roles that are in "Roles NOT allowed to edit feature instance settings".

I've spotted that the "Add post" and "Edit settings" links are both within <span class="modulelinks">, and perhaps this is being hidden for this role even when the role has editing rights on the feature instance.

Later... sorry I was wrong about that - I have taken the affected role out of "Roles NOT allowed to edit feature instance settings" and yet they still get no "add post" link on the blog. Will try to narrow this down. It is a custom role.

I've now found that the same problem affects an HTML Content feature on the same page. If I give the affected role edit permission on this feature, this does not take effect unless they also have editing permissions on the page.

Oh no - I've now found the inverse problem. On another page in my site, there is an HTML content instance where this role does NOT have editing permissions according to the feature settings yet they CAN edit it (when I give them edit permissions on the page).

Also, there's something else up: one of my custom roles is only appearing in some of the panels under Sites Settings> Security > Permissions.

I'm beginning to worry there's something scrambled in my site/database...

Suggestions? Happy to give you (Joe) a login if you'd like a look.  Otherwise I might have to bin this role and re-create.

No - I cannot achieve this on the demo site, but also we cannot change the site - role permissions on the demo.

OK I understand about page editing giving edit rights on features.

But my site still definitely has the other problem, plus the fact one of my custom roles is only appearing in some of the panels under Sites Settings> Security > Permissions.

We have made custom roles, mainly by renaming and adapting mojo defaults and perhaps adding one new one. We've not made any changes "under the bonnet" - only through the UI.

Would you like to take a look? Any other suggestions?

On the demo site under Site Settings > Security, there is no Permissions tab, so I cannot replicate my exact role.

Regarding my site, I've tried clearing cookies etc and working from different machines etc.