[bug] Access Policy: Media

Ruslan-Aleev commented 5 years ago

Bug report

Summary

Recently we tested all the settings in the Access Policy and grouped them into logical groups, but almost every setting has an inaccuracy or even a bug.

Guys, we need help in testing these problems, both from the MODX-user and from the MODX-components.

"Media" Group:

file_manager - For some reason, the entire section of "Media" is hidden, although in fact only the "Media Browser" is disabled, and the "Media Sources" for a direct link work.
file_list - Prevent displaying files in the file system (directories continue to show).
file_view - Prevent downloading and editing the file in the editor, but the links remain in the context menu.
file_create - Prevent creating file in the file system (media browser and file tree).
file_update - Prevent editing file, although the file editor will open, but saving will not work.
file_remove - Prevent deleting file in the file system.
file_upload - Prevent uploading file, but you can create a file. What is strange.
file_unpack - Prevent unpacking zip archives. Bug: zip-archive can be unpacked only from the file tree, it does not work in the media browser, and an error occurs in the console.
directory_list - Prevent displaying directories in the file system (files continue to be displayed).
directory_create - Prevent creating directory in the file system.
directory_update - Prevent renaming directory in the file system.
directory_remove - Prevent deleting directory in the file system.
directory_chmod - Prevent changing the rights of the directory through the manager area. Does it work?

Environment

Ibochkarev commented 5 years ago

Colleagues, any idea how we will solve a list related problem. The guys did a great job. Thank them for testing and analysis @Ruslan-Aleev @iwatchyoufromafar

iWatchYouFromAfar commented 5 years ago

I support @Ruslan-Aleev, we need help and feedback on the work of access policies. And not only those described in the list above. Many ACLs have inaccuracies, bugs or inaccurate descriptions.

Among other things, in 3.x they need to be grouped (such as how system settings). We began to work on it, but in the process of testing we faced problems with many ACL.

JoshuaLuckers commented 5 years ago

Thanks a lot for reporting all these issues. I agree, we should start working on this. All help is welcome!

modxcms / revolution