Advanced permissions problem
Permalink
Hi all
I made a page with simple permissions turned on. I then enabled advanced permissions, and allowed another group (not the creator's group) access to write, approve etc (i.e. full editing rights short of admin).
When I try to edit a block on that page, I just see 'Access denied' instead of the editing interface. If I add admin rights to the editor group, I get the same problem.
I also noticed that with simple permissions (and with advanced permissions, where admin is enabled), a user can go in and remove their own permission to edit a given page, which they can't then get back. That can't be right!
Any thoughts would be appreciated!
I made a page with simple permissions turned on. I then enabled advanced permissions, and allowed another group (not the creator's group) access to write, approve etc (i.e. full editing rights short of admin).
When I try to edit a block on that page, I just see 'Access denied' instead of the editing interface. If I add admin rights to the editor group, I get the same problem.
I also noticed that with simple permissions (and with advanced permissions, where admin is enabled), a user can go in and remove their own permission to edit a given page, which they can't then get back. That can't be right!
Any thoughts would be appreciated!
Thanks for the reply. Curiously, the problem seems to have resolved itself. I wonder if there was some confusion in the switch between simple and advanced permissions? (I also switched back once or twice, without having read the documentation page which says that this shouldn't be done :O)
I hate to say this, but I've been having lots of problems with advanced permissions, as have others. You'll find another thread about with lots of comments.
5.4 really improves on this
QUOTE:
"I also noticed that with simple permissions (and with advanced permissions, where admin is enabled), a user can go in and remove their own permission to edit a given page, which they can't then get back. That can't be right!"
With concrete5 version 5.6.1 using basic permissions, I am experiencing the same issue. Going into page-by-page permissions as the Admin and deselecting "Administrator", as suggested, does not seem to work either. I guess if you are giving someone the ability to edit at a certain level, they technically have "permissions" at that level, but it seems odd that a user other than an Admin can remove their own permissions. Unfortunately one user could remove editing for an entire group if granting permissions at a group-level. I'm not sure why the permissions option would even be available under the "Edit" menu at all unless an Admin grants it to the user or group.
I must be missing something.
"I also noticed that with simple permissions (and with advanced permissions, where admin is enabled), a user can go in and remove their own permission to edit a given page, which they can't then get back. That can't be right!"
With concrete5 version 5.6.1 using basic permissions, I am experiencing the same issue. Going into page-by-page permissions as the Admin and deselecting "Administrator", as suggested, does not seem to work either. I guess if you are giving someone the ability to edit at a certain level, they technically have "permissions" at that level, but it seems odd that a user other than an Admin can remove their own permissions. Unfortunately one user could remove editing for an entire group if granting permissions at a group-level. I'm not sure why the permissions option would even be available under the "Edit" menu at all unless an Admin grants it to the user or group.
I must be missing something.
1. go to "edit page"
2. click on the block that you want to give permissions too and click "set permissions"
3. Make sure they have permissions to read and write the block.
If its still not working try this...
1. go to "edit page"
2. click on the "add to area"
3. click on "set permissions"
4. make sure they can read and write in there too.
you can even select which blocks you want them to add in this area.
you may have to mess around with those options a bit but it should get you what you want.
if you don't want them to be able to remove their own permissions make sure they don't have admin access. which is when you edit a page click on "permissions" in the c5 tool bar. make sure admin is NOT checked.