Area Replacement of ScrapBook display by not admin user shows permission error.

Permalink 0 0 Browser Info Environment
You can reproduce this issue even if you have just installed concrete5 8.5.4.

// How to reproduce //

1. Install concrete5 8.5.4.

2. Select "Empty site"

3. Continue install just guided.

4.Create another user belong to administer group ( As I name this user "admin_sub").

5. Turn advanced permissions on.

6.Relogin as "admin_sub".

7. Put content block any area.
(I call put area as Area-A and content block as Block-A )

8. Copy Block-A.
(I call copied content block as Block-B)

9. Put Block-B to Area-A.

10. Replace Block-B to another area ( call this Area-B) from Area-A.
When I replace Block-B, Block-B icon show as "Scrapbook Display". Not content block's icon.

11. When I just put Block-B to Area-B, popup says "You may not add Scrapbook Display to area AREA-B's_NAME".

Finally, user admin_sub can not operate replacing of scrapbook ( copied and put block).

// Other Info //
・Any block may occur this issue regardless of custom block or official installed block. I checked content block and image block shows this issue.

・If advanced permissions is off, above issue dose NOT occur !! User admin_sub (non admin) can replace scrapbook without problem.

・Admin can replace scrapbook without problem.

・Replacement within same area dose NOT show above issue.


Status: New
junmedia
junmedia replied on at Permalink Reply
junmedia
This issue has been register on Github. Herehttps://github.com/concrete5/concrete5/issues/8989...

concrete5 Environment Information

# concrete5 Version
Core Version - 8.5.2
Version Installed - 8.5.2
Database Version - 20190925072210

# Database Information
Version: 8.0.17
SQL Mode: ONLY_FULL_GROUP_BY,STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION

# concrete5 Packages
Advanced HTML Block (0.9), Static Site Exporter (1.0.1)

# concrete5 Cache Settings
Block Cache - Off
Overrides Cache - Off
Full Page Caching - Off
Full Page Cache Lifetime - Every 6 hours (default setting).

# Server Software
Apache/2.4.37 (centos)

# Server API
fpm-fcgi

# PHP Version
7.2.24

# PHP Extensions
bz2, calendar, cgi-fcgi, Core, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, json, libxml, mbstring, mysqli, mysqlnd, openssl, pcre, PDO, pdo_mysql, pdo_sqlite, Phar, Reflection, session, SimpleXML, sockets, SPL, sqlite3, standard, tokenizer, wddx, xml, xmlreader, xmlrpc, xmlwriter, xsl, zlib

# PHP Settings
max_execution_time - 30
log_errors_max_len - 1024
max_file_uploads - 20
max_input_nesting_level - 64
max_input_time - 60
max_input_vars - 1000
memory_limit - 128M
post_max_size - 20M
upload_max_filesize - 10M
mysqli.max_links - Unlimited
mysqli.max_persistent - Unlimited
pcre.backtrack_limit - 1000000
pcre.recursion_limit - 100000
session.cache_limiter - <i>no value</i>
session.gc_maxlifetime - 7200

Browser User-Agent String

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) Chrome/84.0.4147.135