Version 5.5 Permissions
Permalink 1 user found helpful
Hello all,
I have upgraded one of my sites and I'm getting a little stumped on permissions. There are certain pages that I do not want my customers to see in the dashboard. I can't seem to be able to get them to not show. I have changed the permissions so if you click on the page, it won't let you in, but I would prefer for the to not show up at all. Any idea how to do this?
Thank you!
Rachel
I have upgraded one of my sites and I'm getting a little stumped on permissions. There are certain pages that I do not want my customers to see in the dashboard. I can't seem to be able to get them to not show. I have changed the permissions so if you click on the page, it won't let you in, but I would prefer for the to not show up at all. Any idea how to do this?
Thank you!
Rachel
Hello,
I kind of stumbled on a similar problem. Here are some details that might help you a bit...
I'm trying to configure security groups in my c5 (5.5.1) installation. I want to have a group that can access Sitemap, Files and Members only. I'm setting the Read/Write/Admin rights for those pages in the "Set Permission" dialog, I see it is saved correctly since when I go back the checkboxes are still checked. The thing is users in that configured group cannot access the page (/dashboard/sitemap/full/). They get "You do not have access to the sitemap." error. Is it a bug or do I try to set permissions for the Dashboard/Sitemap the wrong way? If so what's the correct way?
I took a closer look and I might have found something. The permissions are saved in "PagePermissions" but the permissions on the Full Sitemap page are checked against canRead() method (..\concrete\helpers\concrete\dashboard\sitemap.php) that looks in the "TaskPermissionUserGroups table in can($obj = false) (..\concrete\models\task_permission.php)
Please advise :S
Thanks a lot in advance!
Tommy
I kind of stumbled on a similar problem. Here are some details that might help you a bit...
I'm trying to configure security groups in my c5 (5.5.1) installation. I want to have a group that can access Sitemap, Files and Members only. I'm setting the Read/Write/Admin rights for those pages in the "Set Permission" dialog, I see it is saved correctly since when I go back the checkboxes are still checked. The thing is users in that configured group cannot access the page (/dashboard/sitemap/full/). They get "You do not have access to the sitemap." error. Is it a bug or do I try to set permissions for the Dashboard/Sitemap the wrong way? If so what's the correct way?
I took a closer look and I might have found something. The permissions are saved in "PagePermissions" but the permissions on the Full Sitemap page are checked against canRead() method (..\concrete\helpers\concrete\dashboard\sitemap.php) that looks in the "TaskPermissionUserGroups table in can($obj = false) (..\concrete\models\task_permission.php)
Please advise :S
Thanks a lot in advance!
Tommy
Hello,
If that can help anybody else, I finally found the missing piece to my problem. It can be found here:
System & Settings > Permissions & Access > Task Permissions
I was missing "Task Permissions" for my newly created group.
Also, concerning the primary question of this thread, while testing permissions with a user from my newly created group, I saw that if you want to see the real thing, you have to logout and login in order to see changes in the pages displayed in the Dashboard menu - since this seems to be stored in the _SESSION variable. I was getting the login page as you described when I clicked on a link for which I just removed permissions for that user. I guess when saving permissions, the session variable containing the menu should be cleared somehow for all logged in users - with a flag or something. But that's not a big deal...
Thank you,
Tommy
If that can help anybody else, I finally found the missing piece to my problem. It can be found here:
System & Settings > Permissions & Access > Task Permissions
I was missing "Task Permissions" for my newly created group.
Also, concerning the primary question of this thread, while testing permissions with a user from my newly created group, I saw that if you want to see the real thing, you have to logout and login in order to see changes in the pages displayed in the Dashboard menu - since this seems to be stored in the _SESSION variable. I was getting the login page as you described when I clicked on a link for which I just removed permissions for that user. I guess when saving permissions, the session variable containing the menu should be cleared somehow for all logged in users - with a flag or something. But that's not a big deal...
Thank you,
Tommy
Yes, just looking for this. Thought I may need to hack the code, but glad to hear it's not meant to be the case.
After upgrading to 5.5.1 with advanced permissions i am unable to have the permissionsed saved. i click save and it takes but when i go back to permissions the groups i added are removed and the additional permissions i have set are also gone.
I looked at your issue and apparently as of now version 5.5 leaves the links in the dashboard view and redirects the user to a log-in screen. We will investigate why the links are still present.
Best Wishes,
Danny Nunez
Junior Support Developer - concrete5.org