Policy problem with Drafts.

Author Message

Mariusz Scisel

Friday 23 September 2005 5:11:29 am

Hi,

I've been working on a site project for Computer Company. Problems started when I had customized polices and access's rights to different sections and functions for Editors-user group. They publish many of the content like articles, promotions and they want to look around the Draft before they publish it.

The problem is that the Editors can't view own Drafts, which haven't been published yet.

When they access to "My account" where unpublished drafts are stored, and click for an object they can see "Error / kernel (1)". They can edit the draft and publish but they can't view the draft.

Of course I can give them access ( content * * ) to all functions of Content, but when they can read all the site' content even with different users and unfortunately change their information and passwords. :(

I have tested all polices for all sections and subtrees. They didn't get access for Editors to view their own Draft. Only "content * *" gives access to this.

this is my override/site.ini..

[SiteAccessRules]
Rules[]=Access;enable
Rules[]=Module;content/versionview /* doesn't work */
Rules[]=Module;versionview /* doesn't work */
Rules[]=Module;content/draft /* doesn't work */
Rules[]=Module;draft /* doesn't work */
Rules[]=moduleall
Rules[]=Access;disable
Rules[]=Module;user/register /* works */
Rules[]=Module;role/list /* doesn't work when policy content * * */
Rules[]=Module;users/editors /* doesn't work when policy content * * */

[RoleSettings]
PolicyOmitList[]=content/trash
PolicyOmitList[]=content/draft /* doesn't work */
PolicyOmitList[]=content/versionview /* doesn't work */
PolicyOmitList[]=draft /* doesn't work */
PolicyOmitList[]=versionview /* doesn't work */

Maybe someone knows how to establish the policy rights to the Drafts, maybe some kind of code hack ?

Regards, Mariusz

Mariusz Scisel

Monday 26 September 2005 4:23:34 am

How to test this bug?

1. Go to the Amin Panel
2. Create new user in Group "Editors" e.g. test_user
3. You don't need to change polices for Group Editors.
4. Login as test_user to Admin Panel
5. Go to The Content section "eZ publish [Folder]"
6. Create Article e.g. "Test Article 1", fill with some content
7. Save Draft of this Article (NOT PUBLISH !!! Only save draft )
8. Go to the "My account"
9. Try View content of this Draft (NOT "Edit" - Only preview to read the content of it.
In "My Drafts" or in window "Curerent Draft")
10. You sholud get the Error / kernel (1) when Viewing this yet unpulished draft of the article.

This occurs on ezp 3.6.0 - 3.6.1 and 3.6.2

On system:

Apache: 2.0.54
PHP: 4.3.11
MySQL: 4.1.14-nt

Mariusz

Ɓukasz Serwatka

Thursday 29 September 2005 12:16:24 am

Hi Mariusz,

Could you report this problem in bug system?

http://ez.no/community/bugs

Thank you.

Personal website -> http://serwatka.net
Blog (about eZ Publish) -> http://serwatka.net/blog

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.