<!-- 
RSS generated by JIRA (9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b) at Mon Feb 12 05:10:36 CET 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>Magnolia - Issue tracker</title>
    <link>https://jira.magnolia-cms.com</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-uk</language>    <build-info>
        <version>9.4.2</version>
        <build-number>940002</build-number>
        <build-date>19-01-2023</build-date>
    </build-info>


<item>
            <title>[MGNLDATA-24] functions should be hidden based on user&apos;s permissions</title>
                <link>https://jira.magnolia-cms.com/browse/MGNLDATA-24</link>
                <project id="10054" key="MGNLDATA">Magnolia Data Module (closed)</project>
                    <description>&lt;p&gt;access-rights are incorrect&lt;br/&gt;
It seems that a user can modify the data repository even without having the correct permissions. However changes will not succeed.&lt;br/&gt;
Too many options (&apos;New Folder&apos;, &apos;New Item&apos;, &apos;Delete all&apos;, ...) are enabled.&lt;/p&gt;

&lt;p&gt;reproducibility:&lt;br/&gt;
log in as administrator&lt;br/&gt;
create new role &apos;test&apos; and configure as following:&lt;br/&gt;
  Config: read only (selected and sub nodes) to /modules/adminInterface/config/menu/data&lt;br/&gt;
  Data: read only (selected and sub nodes) to /example&lt;br/&gt;
  URL: get &amp;amp; post to /*&lt;/p&gt;

&lt;p&gt;create new user &apos;dummy&apos;:&lt;br/&gt;
  set only role /test&lt;/p&gt;

&lt;p&gt;log out, log in as dummy&lt;br/&gt;
select in the menu &apos;Example&apos; (in the only section Data)&lt;br/&gt;
--&amp;gt; I get the options &apos;New Folder&apos;, &apos;New Item&apos;, &apos;Delete all&apos;, &apos;Activate all&apos; and &apos;Deactivate all&apos;&lt;br/&gt;
--&amp;gt; at least &apos;New Folder&apos;, &apos;New Item&apos; and &apos;Delete all&apos; should not be activated, since read-only is configured&lt;/p&gt;

&lt;p&gt;Click on &apos;New Item&apos; --&amp;gt; the edit Window opens&lt;br/&gt;
  enter name and comment&lt;br/&gt;
  click on &apos;Save&apos; --&amp;gt; the window reloads, but does not close. Also the entry is not saved.&lt;/p&gt;</description>
                <environment>local as well as &lt;a href=&quot;http://demoauthor.magnolia.info/&quot;&gt;http://demoauthor.magnolia.info/&lt;/a&gt;</environment>
        <key id="14235">MGNLDATA-24</key>
            <summary>functions should be hidden based on user&apos;s permissions</summary>
                <type id="1" iconUrl="https://jira.magnolia-cms.com/secure/viewavatar?size=xsmall&amp;avatarId=10883&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.magnolia-cms.com/images/icons/priorities/major.svg">Major</priority>
                        <status id="6" iconUrl="https://jira.magnolia-cms.com/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are not closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="1">Fixed</resolution>
                                        <assignee username="pbaerfuss">Philipp B&#228;rfuss</assignee>
                                    <reporter username="wolfgang">Wolfgang Habicht</reporter>
                        <labels>
                    </labels>
                <created>Thu, 6 Mar 2008 09:36:51 +0100</created>
                <updated>Wed, 16 Sep 2015 11:58:51 +0200</updated>
                            <resolved>Mon, 28 Jul 2008 13:27:26 +0200</resolved>
                                    <version>1.1</version>
                                    <fixVersion>1.2.1</fixVersion>
                                        <due></due>
                            <votes>0</votes>
                                    <watches>1</watches>
                                                                                                                <comments>
                            <comment id="17263" author="pmm" created="Mon, 28 Jul 2008 07:13:55 +0200"  >&lt;p&gt;Fix attached&lt;/p&gt;</comment>
                            <comment id="17264" author="pmm" created="Mon, 28 Jul 2008 07:14:33 +0200"  >&lt;p&gt;The types tree has the same problem. This attached as well.&lt;/p&gt;</comment>
                            <comment id="17274" author="gjoseph" created="Mon, 28 Jul 2008 13:27:26 +0200"  >&lt;p&gt;thanks for the patches! just applied them on trunk, will be available with 1.2.1&lt;/p&gt;</comment>
                            <comment id="112574" author="mmuehlebach" created="Wed, 16 Sep 2015 11:58:51 +0200"  >&lt;p&gt;This ticket was closed because former resolved tickets are deemed to be closed now. If this assumption is untrue in this particular case please feel free to reopen the ticket again.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                            <attachment id="11500" name="GenericDataAdminTreeConfig.java.patch" size="6952" author="pmm" created="Mon, 28 Jul 2008 07:13:55 +0200"/>
                            <attachment id="11501" name="TypeAdminTreeConfig.java.patch" size="4920" author="pmm" created="Mon, 28 Jul 2008 07:14:33 +0200"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                            <customfield id="customfield_14166" key="com.okapya.jira.checklist:checklist">
                        <customfieldname>Acceptance criteria</customfieldname>
                        <customfieldvalues>
                            
        <checklist>
        <![CDATA[
                            




                
                                    <div class="o-completion" style="display: flex; flex-shrink: 0;"><span  class="aui-lozenge aui-lozenge-complete" style="font-size: 12px; font-weight: normal; display: flex; flex-direction: row; align-items: center;" ><span style="padding-right: 4px; vertical-align: middle;"><svg width="15" height="15" viewBox="0 0 15 15" xmlns="http://www.w3.org/2000/svg" fill="white"><path clip-rule="evenodd" d="m10.41037,3.42544l-7.86501,0c-0.72395,0 -1.31084,0.58688 -1.31084,1.31084l0,7.86508c0,0.7239 0.58689,1.3108 1.31084,1.3108l7.86501,0c0.724,0 1.3109,-0.5869 1.3109,-1.3108l0,-7.86508c0,-0.72396 -0.5869,-1.31084 -1.3109,-1.31084zm-7.86501,-0.65542c-1.08593,0 -1.96626,0.88032 -1.96626,1.96626l0,7.86508c0,1.0859 0.88033,1.9662 1.96626,1.9662l7.86501,0c1.086,0 1.9663,-0.8803 1.9663,-1.9662l0,-7.86508c0,-1.08594 -0.8803,-1.96626 -1.9663,-1.96626l-7.86501,0z" fill-rule="evenodd"/><path d="m5.09049,10.18526l-1.82767,-1.82766l-0.78479,0.78479l2.61246,2.61246l5.38758,-5.38754l-0.78483,-0.78479l-4.60275,4.60274z"/></svg></span><span>Empty</span></span></div>
                        ]]>
    </checklist>


                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10111" key="com.atlassian.jira.toolkit:reporterdomain">
                        <customfieldname>Company</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>netcetera.ch</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10031" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Mon, 28 Jul 2008 07:13:55 +0200</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_12730" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_14151" key="com.atlassian.jira.toolkit:message">
                        <customfieldname>Docu info</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10061" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comm is not jira-dev</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10071" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last participant</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>mmuehlebach</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_13136" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            8 years, 22 weeks, 4 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10020" key="com.atlassian.jira.toolkit:attachments">
                        <customfieldname>Number of attachments</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10150" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname>Number of comments</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>4.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10011" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>gjoseph</customfieldvalue>
            <customfieldvalue>mmuehlebach</customfieldvalue>
            <customfieldvalue>pbaerfuss</customfieldvalue>
            <customfieldvalue>pmm</customfieldvalue>
            <customfieldvalue>wolfgang</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10833" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i046fz:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10244" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>24486</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_14145" key="com.intenso.jira.issue-templates:issue-templates-customfield">
                        <customfieldname>Template</customfieldname>
                        <customfieldvalues>
                            


                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_15131" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Time in Discovery</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10032" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>