[SOLVED] Can change publish status in Read permission

Bugs Solved Bugs
1

I’m submitting a…

  • [ x ] Regression (a behavior that stopped working in a new release)
  • [ ] Bug report
  • [ ] Performance issue
  • [ ] Documentation issue or request

Current behavior

The user is assign with a role which has read only permission for one of the schema.
The user can publish/unpublish the content which he should only have read permission. See screenshot:

image
image.png1563×315 20.6 KB

image
The user can also click Delete action and see the delete confirmation popup but item doesn’t get deleted.
image

Expected behavior

User with read permission should not be able to change the content status (publish/unpublish/archive/delete) in all the places (listing mode, edit view mode)

Minimal reproduction of the problem

  • Create a role with read permission for one schema
    image
  • Assign a user to the role
  • Go to content section to check the above screenshots action triggers areas

Environment

  • [ x ] Self hosted with docker
  • [ ] Self hosted with IIS
  • [ ] Self hosted with other version
  • [ ] Cloud version

Version: 4.3

Browser:

  • [ x ] Chrome (desktop)
  • [ ] Chrome (Android)
  • [ ] Chrome (iOS)
  • [ ] Firefox
  • [ ] Safari (desktop)
  • [ ] Safari (iOS)
  • [ ] IE
  • [ ] Edge

Others:

2

Can you show your permissions?

3

Added the role with permissions screenshot under steps to reproduce. ie

contents.category.read

4

Yes, this is somehow weird, I still try to understand why I made it like this.

6

Solved in current dev version.

1 Like
7

thank you will test soon.

8