Bug #5585

Main menu icons and sub-menus are not hidden from users without full permissions

Added by Dan Gillean over 8 years ago. Updated over 8 years ago.

Status:VerifiedStart date:09/13/2013
Priority:HighDue date:
Assignee:José Raddaoui Marín% Done:

100%

Category:Access Control
Target version:Release 2.0.0
Google Code Legacy ID: Tested version:
Sponsored:No Requires documentation:

Description

1) Create a new user, and add to contributor group.
2) Log out, and log in as contributor
3) View AtoM header bar - open Admin menu

Resulting error
Admin menu (and others) are visible and accessible to users without appropriate access privileges.

Expected result
Contributor should only see Add and Manage menus (as in 1.x). Other user groups should maintain same main menu visibility as in 1.x

Note
The users are still prevented from accessing pages restricted by their group - for example, selection Admin > Settings when logged in as a contributor results in a "You don't have permission to view this page" message. But we should still hide the menus altogether.

History

#1 Updated by José Raddaoui Marín over 8 years ago

  • Status changed from New to In progress
  • Assignee changed from Jesús García Crespo to José Raddaoui Marín

#2 Updated by José Raddaoui Marín over 8 years ago

  • Status changed from In progress to QA/Review
  • % Done changed from 0 to 100

Applied in changeset atom|commit:25cb9f3f3b1184a5b454540277fabaacee742554.

#3 Updated by Dan Gillean over 8 years ago

  • Status changed from QA/Review to Feedback

Hi Radda,

Thanks for this. Tested with a contributor and editor accounts and permissions match those of 1.x. However - you've accidentally reversed the order that the main menu icons appear in the header :D

Normally, Right to Left, it is: Add, Manage, Import, Admin
With an admin account, right now it is Admin, Import, Manage, Add

If you can flip them back around, that would be great.

#4 Updated by José Raddaoui Marín over 8 years ago

  • Status changed from Feedback to QA/Review

Applied in changeset atom|commit:5b002c11aa153cd39b1de10b6ea414ed019c06a0.

#5 Updated by Dan Gillean over 8 years ago

  • Status changed from QA/Review to Verified

Also available in: Atom PDF