Uploaded image for project: 'Tasks'
  1. Tasks
  2. TASKS-34

Users without permissions over the pending to publish content can still publish it

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Neutral
    • None
    • 6.2.22
    • None

    Description

      Steps to reproduce

      This is reproducible on our demo instance:

      1. Change travel-demo-publishers permissions to only allow them to read/write on travel site.
      2. Create as superuser or any editor a publishing task for sportstation or a subpage of it.
      3. Login as a travel-demo-publisher and check the tasks.

      Expected results

      Since the user doesn't have permissions over the published pages, we would expect no task to be visible to him.

      Actual results

      All tasks are available regardless of the ACLs set for the user.

      Workaround

      Development notes

      Checklists

        Acceptance criteria

        Attachments

          Activity

            People

              Unassigned Unassigned
              rgaona Roberto Gaona
              AuthorX
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated: