Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Users are always able to see restricted resources #101

Open
BertKooij opened this issue Sep 17, 2018 · 0 comments
Open

Users are always able to see restricted resources #101

BertKooij opened this issue Sep 17, 2018 · 0 comments

Comments

@BertKooij
Copy link

BertKooij commented Sep 17, 2018

Users are always able to review changes from resources which are restricted using resource groups.

For example:

  • User 1 is a administrator and is added to a resource group 'administrators'.
  • User 2 is a redactor and is added to a resource group 'redactors'.
  • A resource is restricted to the resource group 'administrators'.

Steps:

  • When the administrator makes a change to the restricted resource the redactor is able to review the changes at resource tab of VersionX.
  • When the redactor tries to restore the resource an error will be thrown.

Tested version of VersionX2:
VersionX 2.1.3-pl

Tested version of MODX:
MODX Revolution 2.6.5-pl

Note:
I will create a PR for a fix shortly after creating the issue.


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants