search

google-code-export / digitalus-cms

Automatically exported from code.google.com/p/digitalus-cms
1 stars 1 forks source link

ACL problem #175

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. set the permission of role member that can access the page and the guest not.
2. do not log in and type in the url de page with no access you will see the 
page.
3. only for pages at the frontend.

What is the expected output? What do you see instead?
You can still access the page(frontend) by url instead of redirecting to the 
login page.

What version of the product are you using? On what operating system?
digitalus cms 1.10 alpha2

Please provide any additional information below.

<on the frontend>
NOW:
GUEST website.com/securedpage => can see this page by fill in the page url.

MUST BE:
GUEST website.com/securedpage => redirect to login or homepage.
MEMBER website.com/securedpage => when logged in user can access this page.

Original issue reported on code.google.com by provoost...@gmail.com on 31 Jan 2011 at 12:34

GoogleCodeExporter commented 9 years ago 
[deleted comment]
GoogleCodeExporter commented 9 years ago 
please check if you are logged out of the admin panel in any of the tabs in 
your browser or try it from two different browsers before you tried to do this
<on the frontend>
NOW:
GUEST website.com/securedpage => can see this page by fill in the page url.????

Original comment by jspe...@gmail.com on 31 Jan 2011 at 12:40

GoogleCodeExporter commented 9 years ago 
I was logged out (cleaned my history and sessions), So i have a page that only 
registered users can see but when you fill in the url in your browser de guest 
can see the page for registered users. 

But as a guest you don't see the page in de navigation. 

Do you understand the problem now?

Original comment by provoost...@gmail.com on 31 Jan 2011 at 1:02

Attachments:

GoogleCodeExporter commented 9 years ago 
oke problem solved !

Solution:
The page name "search database" changed to searchdatabase, now he shows the 
login page and also you can't use this "search-database" because in permissions 
he won't save it then.

Problem: dont's use whitespace(%20) and '-' in your page name.

looking for a solution to use '-' in page name's so you can save in permissions.

Original comment by provoost...@gmail.com on 31 Jan 2011 at 2:16

GoogleCodeExporter commented 9 years ago 
Okay, there seems to be a problem with the creation of the acl resources with 
regards to empty spaces and hyphens in page names.
I guess they are stripped or converted somehow.

I will check that

Original comment by lowtower1974@gmail.com on 4 Feb 2011 at 8:49