search

modxcms / revolution

MODX Revolution - Content Management Framework
https://modx.com/
GNU General Public License v2.0
1.36k stars 529 forks source link

Policy set wrong for 'Create User Group' #12957

Open wuuti opened 8 years ago

wuuti commented 8 years ago

Summary

When you create a new user group, the preset policy in the wizard is not set when the group is created. Instead, the policy 'Context' is choosen.

Step to reproduce

Create a new user group. Select 'Administrator' at the 'Manager Policy' Field, add 'mgr' to the contexts field and save the group.

create_usergroup

Observed behavior

The group is created, but the context access permissions are not set as expected:

update_usergroup

Expected behavior

The manager policy should be set to the chosen policy at the wizard. Otherwise, if you think everything is right and don't realize that only the context policy has been set, you will get puzzled with your permissions.

Environment

Tested on MODX 2.4.2-pl and 2.4.4-pl.

pixelchutes commented 8 years ago

I can confirm this in 2.5.1. It seems the defined "Manager Policy" during the "Create User Group" step was completely ignored, and instead resulted in Context policy being applied, just as you've pictured above.

pixelchutes commented 8 years ago

NOTE: In my testing, I did two separate tests:

  1. Entered a name for the new group, changed Contexts to web,mgr, and selected desired Policy. Hit Save.
  2. Entered a name for the new group, left Contexts as-is web, and selected desired Policy. Hit Save.

Same results for each.

wuuti commented 7 years ago

Rechecking the issue if it is still valid. #modxbughunt