I’m submitting a…
- [ x ] Regression (a behavior that stopped working in a new release)
- [ ] Bug report
- [ ] Performance issue
- [ ] Documentation issue or request
Current behavior
The user is assign with a role which has read only permission for one of the schema.
The user can publish/unpublish the content which he should only have read permission. See screenshot:
![image](https://support.squidex.io/uploads/default/original/1X/3bbce77dbbe0577f1b602d33088203d9d3e955a9.png)
The user can also click Delete action and see the delete confirmation popup but item doesn’t get deleted.
![image](https://support.squidex.io/uploads/default/original/1X/1fca1636cee951680001566279491f62335982ff.png)
Expected behavior
User with read permission should not be able to change the content status (publish/unpublish/archive/delete) in all the places (listing mode, edit view mode)
Minimal reproduction of the problem
- Create a role with read permission for one schema
- Assign a user to the role
- Go to content section to check the above screenshots action triggers areas
Environment
- [ x ] Self hosted with docker
- [ ] Self hosted with IIS
- [ ] Self hosted with other version
- [ ] Cloud version
Version: 4.3
Browser:
- [ x ] Chrome (desktop)
- [ ] Chrome (Android)
- [ ] Chrome (iOS)
- [ ] Firefox
- [ ] Safari (desktop)
- [ ] Safari (iOS)
- [ ] IE
- [ ] Edge
Others: