<!-- 
RSS generated by JIRA (9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b) at Mon Feb 12 02:02:13 CET 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>Magnolia - Issue tracker</title>
    <link>https://jira.magnolia-cms.com</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-uk</language>    <build-info>
        <version>9.4.2</version>
        <build-number>940002</build-number>
        <build-date>19-01-2023</build-date>
    </build-info>


<item>
            <title>[MGNLFORUM-259] Creating thread- and forum-node should not require moderator-rights</title>
                <link>https://jira.magnolia-cms.com/browse/MGNLFORUM-259</link>
                <project id="10130" key="MGNLFORUM">Forum (closed)</project>
                    <description>&lt;p&gt;Since the introduction of the &quot;simple security model&quot;, a user with &quot;some basic forum rights&quot; should be able to create a thread (or forum, on EE with multi-site or multi-locale).&lt;/p&gt;

&lt;p&gt;What means &quot;some basic forum right&quot;? &lt;br/&gt;
The issue poped-up because currently anonmyous user cannot create a 1st comment on page-commenting. &lt;br/&gt;
When entering the 1st comment to a page, a thread-node is created in the pagecommenting-Forum-Node.&lt;br/&gt;
On EE, with multi-site and/or multi-locale, it is required to create a forum-node by anonymous user.&lt;/p&gt;

&lt;p&gt;Note, that anonymous-user has the role &quot;forum-pagecomments-user&quot;.&lt;br/&gt;
Since we do no more check speficially for every created forum (per ACL), it should be possible to create a thread with the role &quot;forum_ALL-user&quot;.&lt;br/&gt;
Now ... either anonymous-user also should get &quot;forum_ALL-user&quot; (which i think is wrong) ... or for the creation of a thread, it should be checked, whether the user has&lt;br/&gt;
 &quot;forum-pagecomments-user&quot; or &quot;forum_ALL-user&quot; -role.&lt;/p&gt;

&lt;p&gt;During the very last changes on &lt;a href=&quot;https://jira.magnolia-cms.com/browse/MGNLFORUM-253&quot; title=&quot;DefaultForumManager#isModerator should work based on roles &quot; class=&quot;issue-link&quot; data-issue-key=&quot;MGNLFORUM-253&quot;&gt;&lt;del&gt;MGNLFORUM-253&lt;/del&gt;&lt;/a&gt; there has been added a check  in &lt;tt&gt;DefaultForumManager#createThread&lt;/tt&gt;.&lt;br/&gt;
&lt;tt&gt;isModerator&lt;/tt&gt; currently prevents anonymous-user to create the thread (or the forum-node). &lt;/p&gt;
</description>
                <environment></environment>
        <key id="38239">MGNLFORUM-259</key>
            <summary>Creating thread- and forum-node should not require moderator-rights</summary>
                <type id="1" iconUrl="https://jira.magnolia-cms.com/secure/viewavatar?size=xsmall&amp;avatarId=10883&amp;avatarType=issuetype">Bug</type>
                                            <priority id="1" iconUrl="https://jira.magnolia-cms.com/images/icons/priorities/blocker.svg">Blocker</priority>
                        <status id="6" iconUrl="https://jira.magnolia-cms.com/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are not closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="1">Fixed</resolution>
                                        <assignee username="cmeier">Christoph Meier</assignee>
                                    <reporter username="cmeier">Christoph Meier</reporter>
                        <labels>
                    </labels>
                <created>Mon, 28 Apr 2014 12:08:59 +0200</created>
                <updated>Wed, 14 May 2014 17:49:58 +0200</updated>
                            <resolved>Wed, 7 May 2014 10:06:50 +0200</resolved>
                                    <version>3.3</version>
                                    <fixVersion>3.3.1</fixVersion>
                                    <component>security</component>
                        <due></due>
                            <votes>0</votes>
                                    <watches>2</watches>
                                                                                                                <comments>
                            <comment id="84666" author="cmeier" created="Tue, 6 May 2014 17:21:50 +0200"  >&lt;p&gt;&lt;tt&gt;isModerator()&lt;/tt&gt; has been removed from the methods which are responsible to create thread- or forum-node; doesn&apos;t really make sense to have it there. &lt;/p&gt;</comment>
                            <comment id="84667" author="cmeier" created="Tue, 6 May 2014 17:22:46 +0200"  >&lt;p&gt;Commited onto branch &quot;&lt;a href=&quot;https://jira.magnolia-cms.com/browse/MGNLFORUM-259&quot; title=&quot;Creating thread- and forum-node should not require moderator-rights&quot; class=&quot;issue-link&quot; data-issue-key=&quot;MGNLFORUM-259&quot;&gt;&lt;del&gt;MGNLFORUM-259&lt;/del&gt;&lt;/a&gt;&quot;.&lt;br/&gt;
(See &lt;a href=&quot;https://git.magnolia-cms.com/gitweb/?p=modules/forum.git;a=commit;h=39488aaaf5a09d03dd7f4c1ff04df522af38cece&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://git.magnolia-cms.com/gitweb/?p=modules/forum.git;a=commit;h=39488aaaf5a09d03dd7f4c1ff04df522af38cece&lt;/a&gt; )&lt;/p&gt;</comment>
                            <comment id="84693" author="dlipp" created="Wed, 7 May 2014 09:00:48 +0200"  >&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;pls add the unit-tests that&apos;s only succeeding after applying the change&lt;/li&gt;
	&lt;li&gt;line 202 (//isModerator(hm,forum)): we shouldn&apos;t comment it out but drop the line&lt;/li&gt;
&lt;/ul&gt;
</comment>
                            <comment id="84706" author="cmeier" created="Wed, 7 May 2014 10:06:50 +0200"  >&lt;p&gt;Added test; removed commented line.&lt;br/&gt;
&lt;a href=&quot;https://git.magnolia-cms.com/gitweb/?p=modules/forum.git;a=commit;h=6794fabdb24678e302a43bfe32a175d66e8b7a0e&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://git.magnolia-cms.com/gitweb/?p=modules/forum.git;a=commit;h=6794fabdb24678e302a43bfe32a175d66e8b7a0e&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10020">
                    <name>dependency</name>
                                                                <inwardlinks description="is depended upon by">
                                        <issuelink>
            <issuekey id="38342">MGNLCMNT-107</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="38444">MGNLCMNT-108</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                            <customfield id="customfield_14166" key="com.okapya.jira.checklist:checklist">
                        <customfieldname>Acceptance criteria</customfieldname>
                        <customfieldvalues>
                            
        <checklist>
        <![CDATA[
                            




                
                                    <div class="o-completion" style="display: flex; flex-shrink: 0;"><span  class="aui-lozenge aui-lozenge-complete" style="font-size: 12px; font-weight: normal; display: flex; flex-direction: row; align-items: center;" ><span style="padding-right: 4px; vertical-align: middle;"><svg width="15" height="15" viewBox="0 0 15 15" xmlns="http://www.w3.org/2000/svg" fill="white"><path clip-rule="evenodd" d="m10.41037,3.42544l-7.86501,0c-0.72395,0 -1.31084,0.58688 -1.31084,1.31084l0,7.86508c0,0.7239 0.58689,1.3108 1.31084,1.3108l7.86501,0c0.724,0 1.3109,-0.5869 1.3109,-1.3108l0,-7.86508c0,-0.72396 -0.5869,-1.31084 -1.3109,-1.31084zm-7.86501,-0.65542c-1.08593,0 -1.96626,0.88032 -1.96626,1.96626l0,7.86508c0,1.0859 0.88033,1.9662 1.96626,1.9662l7.86501,0c1.086,0 1.9663,-0.8803 1.9663,-1.9662l0,-7.86508c0,-1.08594 -0.8803,-1.96626 -1.9663,-1.96626l-7.86501,0z" fill-rule="evenodd"/><path d="m5.09049,10.18526l-1.82767,-1.82766l-0.78479,0.78479l2.61246,2.61246l5.38758,-5.38754l-0.78483,-0.78479l-4.60275,4.60274z"/></svg></span><span>Empty</span></span></div>
                        ]]>
    </checklist>


                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10111" key="com.atlassian.jira.toolkit:reporterdomain">
                        <customfieldname>Company</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>magnolia-cms.com</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10031" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 7 May 2014 09:00:48 +0200</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_12730" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_14151" key="com.atlassian.jira.toolkit:message">
                        <customfieldname>Docu info</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10061" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comm is not jira-dev</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10071" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last participant</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>mmuehlebach</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_13136" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            9 years, 41 weeks, 4 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10020" key="com.atlassian.jira.toolkit:attachments">
                        <customfieldname>Number of attachments</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10150" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname>Number of comments</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>4.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10011" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>cmeier</customfieldvalue>
            <customfieldvalue>dlipp</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10833" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i03aqv:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10244" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>19337</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_14145" key="com.intenso.jira.issue-templates:issue-templates-customfield">
                        <customfieldname>Template</customfieldname>
                        <customfieldvalues>
                            


                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_15131" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Time in Discovery</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10032" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>