[PAGES-425] Pages App shows Dialog Actions to Users without writePermission Created: 15/Apr/21  Updated: 13/Nov/21  Resolved: 12/Nov/21

Status: Closed
Project: Magnolia pages module
Component/s: Pages app
Affects Version/s: 6.2.7
Fix Version/s: 6.2.12

Type: Bug Priority: Low
Reporter: Matthias Müller Assignee: Antonín Juran
Resolution: Fixed Votes: 0
Labels: maintenance
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Relates
relates to PAGES-353 writePermissionRequired is not set in... Closed
Template:
Patch included:
Yes
Acceptance criteria:
[ ]*
  • ensure actions are not available that shouldn't be available (proper writePermissionRequired settings)
[ ]*
  • no ignored tests
[ ]*
  • check bugs are not reproducible in the new app

[ ]*
  • (MGNLUI-6509) Item added via detail SubApp is not selected in the browser after saving
[ ]*
  • (MGNLUI-6550) Ensure detail subApps don't use path but <thing>'s name in tab titles -> and thus page title
Task DoD:
[X]* Doc/release notes changes? Comment present?
[X]* Downstream builds green?
[X]* Solution information and context easily available?
[X]* Tests
[X]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[X]* Steps to reproduce, expected, and actual results filled
[X]* Affected version filled
Date of First Response:
Sprint: Content Mngmnt 16 / Maintenace

 Description   

Steps to reproduce

  1. Set readonly permissions for some path to a user
  2.  Login as this user, open a page with Write-Permissions in Edit Mode
  3. Navigate to a page with Read-Only-Permissions
  4. Actions like editPage are active, the dialogs may be opened, but crashes on save (as writePermissions are missing). Logs, screenshots, gifs...

Expected results

  • Actions like editPage, editArea and editComponent should only be active for users if they have writePermissions.

 

Actual results

see Steps to reproduce

Workaround

Decorate the Pages App and set writePermissionRequired on the availability definition of the affted actions. E.g.:

 
subApps:
  detail:
    actions:
      editPage:
        availability:
          writePermissionRequired: true

Development notes

Add writePermissionRequired to the corresponding edit-actions in the pages-app definition.


Generated at Mon Feb 12 06:18:49 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.