Editor Permissions & Changing page owner
Permalink 1 user found helpful
Version 5.3.2
I've created pages (3rd level) and assigned a group to edit each one. The member(s) of the groups are able to access their page and enter edit mode. They are able to add new blocks to their page and delete blocks.
They are NOT able to edit the blocks they create. They aren't able to edit any blocks- they can only create new ones and delete the old ones. When they click on a block and choose edit, the window says Access Denied. So they can't go back and edit something if they make a mistake or need to update content. Super frustrating.
They can add new sub pages as well. On the sub pages they can add blocks and then edit the blocks after they've been saved (proper behavior).
I've checked and re-checked all the permissions and the only thing I can see creating the problem is that the Group user/editor is not the page Owner. So I tried to change the page owner in page Properties but the Choose User menu that appears is blank (I have about 15 users).
So:
Is there a separate permission to allow users to Edit Blocks in addition to Adding and Deleting?
Why is my Choose User menu blank when I attempt to assign a new page Owner?
I've created pages (3rd level) and assigned a group to edit each one. The member(s) of the groups are able to access their page and enter edit mode. They are able to add new blocks to their page and delete blocks.
They are NOT able to edit the blocks they create. They aren't able to edit any blocks- they can only create new ones and delete the old ones. When they click on a block and choose edit, the window says Access Denied. So they can't go back and edit something if they make a mistake or need to update content. Super frustrating.
They can add new sub pages as well. On the sub pages they can add blocks and then edit the blocks after they've been saved (proper behavior).
I've checked and re-checked all the permissions and the only thing I can see creating the problem is that the Group user/editor is not the page Owner. So I tried to change the page owner in page Properties but the Choose User menu that appears is blank (I have about 15 users).
So:
Is there a separate permission to allow users to Edit Blocks in addition to Adding and Deleting?
Why is my Choose User menu blank when I attempt to assign a new page Owner?
Yes, I enabled advanced permissions AFTER I encountered the issue in hopes it would lead to a solution. Unfortunately it didn't.
very weird, but my select_user.php file as blank (present but empty, 0KB)- dunno how that happened. So now I can change owner.
Still doesn't explain why groups with edit permission can only add/delete blocks and not edit them.
Still doesn't explain why groups with edit permission can only add/delete blocks and not edit them.
if you start with a fresh install, turn advanced permissions on before making content, and try to reproduce the problem, can you?
-frz
-frz
Just tried a very similar setup on another install and enabled advanced permissions before creating a new page, new group, and new user.
The test worked as expected- user was able to edit the blocks on the page.
Went back to the malfunctioning install and tried creating a new page and assigning an existing group to edit it. Same result as before- user could not edit blocks (only add/delete) even on the page that was created after advanced permissions were enabled.
- WORKAROUND -
Since I just need this to work right now, I modified edit_block_popup.php to ignore "$bp->canWrite()"
This allows the users to edit the blocks without checking whether or not they have permission.
I haven't figured out where $bp->canWrite() is checking their permissions or how to set the permission values it's checking.
The test worked as expected- user was able to edit the blocks on the page.
Went back to the malfunctioning install and tried creating a new page and assigning an existing group to edit it. Same result as before- user could not edit blocks (only add/delete) even on the page that was created after advanced permissions were enabled.
- WORKAROUND -
Since I just need this to work right now, I modified edit_block_popup.php to ignore "$bp->canWrite()"
This allows the users to edit the blocks without checking whether or not they have permission.
I haven't figured out where $bp->canWrite() is checking their permissions or how to set the permission values it's checking.
I'm having the exact same challenge.
I created a site (only testing at the moment), set up some pages/sub-pages/sub-sub-pages with test content. I then turned on advanced permission, created a new user group and gave it full permissions to a single page. Users in that group can do everything except edit blocks, they just get 'Access Denied' when trying. Interestingly, edit is available from the menu when clicking on blocks, its just after clicking on edit that you get the 'Access Denied' message.
Incidentally, the window that pops up with the 'Access Denied' message has no buttons for closing it - the only way to get rid of it is to refresh the page.
I tried adding the new group to the home page and resetting the single page to inherit permissions and then users in this group were able to edit the blocks. Seeing that this worked, I removed the group from the home page and tried adding it to the parent page of the page in question thinking that it might work the same as adding the group to the home page. No luck, the blocks went back to being un-editable.
So, this leads me to believe that the ability for a user/group to edit a block is being taken from the home page only, regardless of what actual permissions are setup to override the home page permissions ... at least if advanced permissions is turned on after content has been created as per SpeedBump's tests.
I'm going to try a fresh install now ...
Thanks for the great work on Concrete5! Very refreshing experience after proprietary CMS's and a frustrating foray into Drupal.
Gah! I just lost the ability to see all content in all versions of this page when I edited the permissions for the page using a user account in the new group ... not sure what that was ... only the admin account can still see the content. Anyways ... perhaps a fresh install is in order.
[UPDATE]
Seems page-specific permissions magically turned on and all permission check boxes were turned off. Resetting the page to inherit permissions fixed that problem.
I created a site (only testing at the moment), set up some pages/sub-pages/sub-sub-pages with test content. I then turned on advanced permission, created a new user group and gave it full permissions to a single page. Users in that group can do everything except edit blocks, they just get 'Access Denied' when trying. Interestingly, edit is available from the menu when clicking on blocks, its just after clicking on edit that you get the 'Access Denied' message.
Incidentally, the window that pops up with the 'Access Denied' message has no buttons for closing it - the only way to get rid of it is to refresh the page.
I tried adding the new group to the home page and resetting the single page to inherit permissions and then users in this group were able to edit the blocks. Seeing that this worked, I removed the group from the home page and tried adding it to the parent page of the page in question thinking that it might work the same as adding the group to the home page. No luck, the blocks went back to being un-editable.
So, this leads me to believe that the ability for a user/group to edit a block is being taken from the home page only, regardless of what actual permissions are setup to override the home page permissions ... at least if advanced permissions is turned on after content has been created as per SpeedBump's tests.
I'm going to try a fresh install now ...
Thanks for the great work on Concrete5! Very refreshing experience after proprietary CMS's and a frustrating foray into Drupal.
Gah! I just lost the ability to see all content in all versions of this page when I edited the permissions for the page using a user account in the new group ... not sure what that was ... only the admin account can still see the content. Anyways ... perhaps a fresh install is in order.
[UPDATE]
Seems page-specific permissions magically turned on and all permission check boxes were turned off. Resetting the page to inherit permissions fixed that problem.
I'm having the same trouble SpeedBump and dwhillier describe above in a fresh install of 5.3.3
Since its a fresh install you wont lose anything:P
First you Install, Then Before doing ANYTHING! (ok maybe you can login) put in the advanced permissions line!
and then do whatever you want :P
First you Install, Then Before doing ANYTHING! (ok maybe you can login) put in the advanced permissions line!
and then do whatever you want :P
In fact, turning on advanced permissions was the first thing I did after the site.php file was written.
i will check on my host tomorrow,
are you using windows or linux?
are you using windows or linux?
Linux
The only way I've overcome this is to privilege the group with editor access to the site's Home page. Now the users in the group are able to edit all the blocks normally... but they have access to edit the Home page as well.
It's as if the block edit permissions are being inherited from the top-level page, not the permissions of the page they're on.
It's as if the block edit permissions are being inherited from the top-level page, not the permissions of the page they're on.
what did you check in the advanced permissions box unnder
Read Versions Write Approve Delete Admin
X X X X X
is what i put
all but admin for the user and it seems to be fine
Read Versions Write Approve Delete Admin
X X X X X
is what i put
all but admin for the user and it seems to be fine
I had all boxes (including Admin) checked so I tried unchecking Admin and attempting. User still received Access Denied when attempting to edit an existing block.
Restored user's access to edit top-level (Home) page and user was able to edit existing blocks again (no error).
Restored user's access to edit top-level (Home) page and user was able to edit existing blocks again (no error).
Oh god, I've just walked into the same problem I think, did you never get a resolution? In fact I just gave the user full rights to the home page (I think) and still they can only add but not edit. This is really a setback. I'm unclear as to whether a reinstall fixed it for those that tried?. All that work messing around with themes etc
No, I'm still facing permission problems (specifically this error most of the time) on several sites.
Sometimes deleting the page/group/user and re-doing it all fixes it, some times it doesn't.
Sometimes deleting the page/group/user and re-doing it all fixes it, some times it doesn't.
be sure you clear your site cache during these changes, may help.
clearing cache didn't help either. Still experiencing this error with some users/groups/pages. But not all- it's really weird.
Oh dear, I rebuilt the instalation before christmas (due to not setting advanced permissions at the outset), did a quick test and all seemed well. Rebuilt the site, gave a teach in for 6 editors, and then it all started to fall apart. Permissions just seem to be random and changing. Feeling really really despondant about this. I'll try the home page mod route, if anybody has any help I'd really appretiate it. Not quite sure where to go with this, did switching off cache help?
Oh dear, I rebuilt the instalation before christmas (due to not setting advanced permissions at the outset), did a quick test and all seemed well. Rebuilt the site, gave a teach in for 6 editors, and then it all started to fall apart. Permissions just seem to be random and changing. Feeling really really despondant about this. I'll try the home page mod route, if anybody has any help I'd really appretiate it. Not quite sure where to go with this, did switching off cache help?
Fritz - Is there a solution to this? We have too much on the site to re-install.
The user has all rights to the page, can create blocks but cannot make changes to the block at a later time.
Thank you
The user has all rights to the page, can create blocks but cannot make changes to the block at a later time.
Thank you
On my site http://www.rebuildyourheart.com the words "My Site" are like a watermark. Cannot get to them to remove them. Any ideas on getting them gone. New to Concrete
Thanks G
Thanks G
gptonk search or make a new topic, that has nothing to do with this
Murray in 5.4 the Permissions system has been greatly improved, 5.4RC1 came out today
Murray in 5.4 the Permissions system has been greatly improved, 5.4RC1 came out today
Kewl Mnkras,
I was able to get the blocks to edit by resetting area permissions. A pain, but it works. I will read up on 5.4RC1.
Thanks a lot.
Murray
I was able to get the blocks to edit by resetting area permissions. A pain, but it works. I will read up on 5.4RC1.
Thanks a lot.
Murray
This pemissions thing is really becomming problematic, it seems to be very difficult to track down a set of procedures to cure it. Even as a work around. I'd already rebuilt the site once and thought it was solved, it wasn't. Does anyone have any reason to think that the new release solves or partially solves it? Happy to update if its going to help, but if not, then I think I'll have to have a long think. Love the product, and have got used to it, but the pemissions is quite a big issue for the site I've been working on and I seem to be removing all the security in an effort to allow functionality.
Also still haven't found a solution. I have 3 sites running that I've had to just comment out all instances of "$bp->canWrite()" in order to allow editors to make changes to blocks.
Access Denied error is really annoying...
Access Denied error is really annoying...
i believe it should not even show it if you cant edit
do you have advanced permissions on?