Version: 3.3-1 (3.3) Howto set right permissions?

Next topic

Author	Message
K259	Tuesday 23 December 2003 6:16:19 pm In 3.3-1 (3.3) the anonymous user have no rights to participate in the poll. I've checked the role, but don't know which rights to give.. I want the anonymous user to be able to participate in the polling..what do I add in the anonymous-role? Best regards Zinistry
Dariusz Wlodarczyk	Wednesday 24 December 2003 2:12:39 am I don't know what to do with this but i have similiar problem. I want the anonymous user to be able look at version history and preview older versions of content objects but content->versionread rights is not enough. I think this is the problem with rights checking in content module -> versions.php if ( !$object->attribute( 'can_read' ) ) return $Module->handleError( EZ_ERROR_KERNEL_ACCESS_DENIED, 'kernel' ); if ( !$object->attribute( 'can_edit' ) ) return $Module->handleError( EZ_ERROR_KERNEL_ACCESS_DENIED, 'kernel' ); Why user must have edit rights to only view past versions of contentobject ? It's disabling this checking safe? Maybe with pools is similiar reason of problem ?

Author

Message

Tuesday 23 December 2003 6:16:19 pm

In 3.3-1 (3.3) the anonymous user have no rights to participate in the poll. I've checked the role, but don't know which rights to give..

I want the anonymous user to be able to participate in the polling..what do I add in the anonymous-role?

Best regards
Zinistry

Dariusz Wlodarczyk

Wednesday 24 December 2003 2:12:39 am

I don't know what to do with this but i have similiar problem.

I want the anonymous user to be able look at version history and preview older versions of content objects but content->versionread rights is not enough.
I think this is the problem with rights checking in content module -> versions.php

if ( !$object->attribute( 'can_read' ) )
return $Module->handleError( EZ_ERROR_KERNEL_ACCESS_DENIED, 'kernel' );
if ( !$object->attribute( 'can_edit' ) )
return $Module->handleError( EZ_ERROR_KERNEL_ACCESS_DENIED, 'kernel' );

Why user must have edit rights to only view past versions of contentobject ?
It's disabling this checking safe?

Maybe with pools is similiar reason of problem ?