Implement ACL to backend menus#9814
Conversation
Satisfied sniffer
the testing instructions are incomplete,
NEW Sites: patch works properly
It worked for new installation,
There are changes into the installation folder into the SQL files, you are modifying the inital rows of the assets TABLE.
but you need to see how to handle upgrading existing sites too |
|
Hello @ggppdk,
|
|
Confirming that a database fix is required after applying the patch - please add to the test intructions |
|
I tested this on an new 3.5.2 dev successfully. I've inspected the asset table and the rules were set properly for all com_menu.menu.x records. |
Furthermore i found why login to all user fails after saving (except for super admins)
e.g. the following asset is after denying create on the "administrator" usergroup for "about Joomla" menu type
INSERT INTO The reason is because _getAssetParentId() is not called and this is because the "asset_id" column in menu_types table was not created,
so it is simple to fix ... change *.sql files used for updating existing sites ... |
|
Hello @ggppdk YES! Thank you for this find! |
|
I have tested this item ✅ successfully on 1a96f6c This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
I have tested this item ✅ successfully on 1a96f6c This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
Just want to say the comments blocks are not correct ( It already has two tests, so i guess a maintainer can correct that when merging. |
|
It would be better if the doc blocks were updated by the creator of this PR |
|
This PR has received new commits. CC: @chmst, @designbengel This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
Ok, I updated the "since" parameter to 3.6 |
|
@wilsonge were the @SInCE changes in /libraries/legacy/table/menu/type.php correct? If so then this can be RTC as it had two successful tests before the docblock changes This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
@bembelimen now we have merge conflicts can you have a look? If it is back in sync you can ping me and i set it back to RTC. Thanks. |
…enu_ACL # Conflicts: # administrator/components/com_menus/models/forms/filter_items.xml # administrator/components/com_menus/models/items.php # administrator/components/com_menus/views/items/tmpl/default.php # administrator/components/com_menus/views/items/tmpl/default_batch_body.php
|
This PR has received new commits. CC: @chmst, @designbengel This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
Thanks -> RTC This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9814. |
|
@zero-24 Thanks, the problem was, that the "Show all items" feature was looks very "cobbled together". I had to clean up some stuff to implement the ACL check again. So all conflics should be solved now. |
|
Merged - thankyou! |
|
It looks like this has totally broken #10190 👎 |
|
In which way? |
|
No more All menu items here |
|
@infograf768 Thanks, readded the entry: #10279 |
|
Also, batch has changed I had a special batch body to prevent using batch when we have the All menu items on |
|
Please create a new issue and dont comment on closed issues On 7 May 2016 at 16:36, infograf768 notifications@github.com wrote:
Brian Teeman |
|
What a surprise it was @wilsonge that broke the web |
|
Come on |
|
This was the bactchcopy content |
That made no sense, why prevent batch? The batch process is independed from the choosen menutype (still works for "all") |
| array( | ||
| null, null, null, null, null, null, null, null, null, | ||
| null, 'a.published', null, null, null, null, | ||
| null, 'apublished', null, null, null, null, |
|
Nono |
|
Please just reinstate #10190 as it was merged |
|
see: #10281 I don't like the idea to deacticate functionality just because the new feature (= show all items) did not implement this function properly, but OK, I added the check again... |
Summary of Changes
With this pull request it's possible to define the ACL rights for each menutype (and therefore all menu items of this type).
Testing Instructions