I've created pages (3rd level) and assigned a group to edit each one. The member(s) of the groups are able to access their page and enter edit mode. They are able to add new blocks to their page and delete blocks.
They are NOT able to edit the blocks they create. They aren't able to edit any blocks- they can only create new ones and delete the old ones. When they click on a block and choose edit, the window says Access Denied. So they can't go back and edit something if they make a mistake or need to update content. Super frustrating.
They can add new sub pages as well. On the sub pages they can add blocks and then edit the blocks after they've been saved (proper behavior).
I've checked and re-checked all the permissions and the only thing I can see creating the problem is that the Group user/editor is not the page Owner. So I tried to change the page owner in page Properties but the Choose User menu that appears is blank (I have about 15 users).
So:
Is there a separate permission to allow users to Edit Blocks in addition to Adding and Deleting?
Why is my Choose User menu blank when I attempt to assign a new page Owner?
Just tried a very similar setup on another install and enabled advanced permissions before creating a new page, new group, and new user.
The test worked as expected- user was able to edit the blocks on the page.
Went back to the malfunctioning install and tried creating a new page and assigning an existing group to edit it. Same result as before- user could not edit blocks (only add/delete) even on the page that was created after advanced permissions were enabled.
- WORKAROUND -
Since I just need this to work right now, I modified edit_block_popup.php to ignore "$bp->canWrite()"
This allows the users to edit the blocks without checking whether or not they have permission.
I haven't figured out where $bp->canWrite() is checking their permissions or how to set the permission values it's checking.
I created a site (only testing at the moment), set up some pages/sub-pages/sub-sub-pages with test content. I then turned on advanced permission, created a new user group and gave it full permissions to a single page. Users in that group can do everything except edit blocks, they just get 'Access Denied' when trying. Interestingly, edit is available from the menu when clicking on blocks, its just after clicking on edit that you get the 'Access Denied' message.
Incidentally, the window that pops up with the 'Access Denied' message has no buttons for closing it - the only way to get rid of it is to refresh the page.
I tried adding the new group to the home page and resetting the single page to inherit permissions and then users in this group were able to edit the blocks. Seeing that this worked, I removed the group from the home page and tried adding it to the parent page of the page in question thinking that it might work the same as adding the group to the home page. No luck, the blocks went back to being un-editable.
So, this leads me to believe that the ability for a user/group to edit a block is being taken from the home page only, regardless of what actual permissions are setup to override the home page permissions ... at least if advanced permissions is turned on after content has been created as per SpeedBump's tests.
I'm going to try a fresh install now ...
Thanks for the great work on Concrete5! Very refreshing experience after proprietary CMS's and a frustrating foray into Drupal.
Gah! I just lost the ability to see all content in all versions of this page when I edited the permissions for the page using a user account in the new group ... not sure what that was ... only the admin account can still see the content. Anyways ... perhaps a fresh install is in order.
[UPDATE]
Seems page-specific permissions magically turned on and all permission check boxes were turned off. Resetting the page to inherit permissions fixed that problem.
The only way I've overcome this is to privilege the group with editor access to the site's Home page. Now the users in the group are able to edit all the blocks normally... but they have access to edit the Home page as well.
It's as if the block edit permissions are being inherited from the top-level page, not the permissions of the page they're on.
I had all boxes (including Admin) checked so I tried unchecking Admin and attempting. User still received Access Denied when attempting to edit an existing block.
Restored user's access to edit top-level (Home) page and user was able to edit existing blocks again (no error).
Oh god, I've just walked into the same problem I think, did you never get a resolution? In fact I just gave the user full rights to the home page (I think) and still they can only add but not edit. This is really a setback. I'm unclear as to whether a reinstall fixed it for those that tried?. All that work messing around with themes etc
Oh dear, I rebuilt the instalation before christmas (due to not setting advanced permissions at the outset), did a quick test and all seemed well. Rebuilt the site, gave a teach in for 6 editors, and then it all started to fall apart. Permissions just seem to be random and changing. Feeling really really despondant about this. I'll try the home page mod route, if anybody has any help I'd really appretiate it. Not quite sure where to go with this, did switching off cache help?
Oh dear, I rebuilt the instalation before christmas (due to not setting advanced permissions at the outset), did a quick test and all seemed well. Rebuilt the site, gave a teach in for 6 editors, and then it all started to fall apart. Permissions just seem to be random and changing. Feeling really really despondant about this. I'll try the home page mod route, if anybody has any help I'd really appretiate it. Not quite sure where to go with this, did switching off cache help?
On my site http://www.rebuildyourheart.com the words "My Site" are like a watermark. Cannot get to them to remove them. Any ideas on getting them gone. New to Concrete
Thanks G
This pemissions thing is really becomming problematic, it seems to be very difficult to track down a set of procedures to cure it. Even as a work around. I'd already rebuilt the site once and thought it was solved, it wasn't. Does anyone have any reason to think that the new release solves or partially solves it? Happy to update if its going to help, but if not, then I think I'll have to have a long think. Love the product, and have got used to it, but the pemissions is quite a big issue for the site I've been working on and I seem to be removing all the security in an effort to allow functionality.
Also still haven't found a solution. I have 3 sites running that I've had to just comment out all instances of "$bp->canWrite()" in order to allow editors to make changes to blocks.
Access Denied error is really annoying...
Code
Post Reply
Delete Post
You are allowed to delete your post for 5 minutes after it's posted.
i believe it should not even show it if you cant edit
do you have advanced permissions on?