Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

In sites portlet, if the user does not have permissions to edit a site, we should not generate a link the site name and type.

Description

In the Sites portlet (control panel), the site name and type are links to edit a site's details. However, if the user does not have permissions to edit the site, the links still show and the user is given a "permission denied" message".

The portlet should not generate a link if the user does not have edit rights for the site.

Activity

Show:

Cynthia WilburnMarch 12, 2012 at 2:16 PM

Reopening to add 6.1.1 CE GA2. Close as Fixed.

Sharry ShiFebruary 14, 2012 at 8:40 PM
Edited

PASSED Manual Testing using the following steps:
1. Create a new site named "Test".
2. Create a new user named "User1" in role of Power User,assign the site Test to User1.
3. Login as User1.
4. Go to Control Panel.
5. Click at Site under Portal.

Reproduced on:
Tomcat 7.0 + MySQL 5. 6.1.x GIT ID: db26d094cc3c94955cf2ae180affa25c0bc06317.
Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: bd3fdd32923a8e42746cd30f91475c29b061bdb0.

You will find the site name and type are links to edit a site's details.

Fixed on:
Tomcat 7.0 + MySQL 5. 6.1.x GIT ID: 4166a5e8894ce3c6024bfc549545e5fc74c1320c.
Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: 6535813184f8681e14487b205c17df1caee259d0.

You will find there has no link on the site name and type.

Michael SaechangFebruary 13, 2012 at 11:12 AM

Committed on:
6.1.x GIT ID: f0bce5bca3168e85412ff1421cc328e8761637ee.
6.2.x GIT ID: c212a4246954fb53bb3ff2612c4e9fd4fe6ea2e3.

Michael HanFebruary 12, 2012 at 7:09 PM

Reclassifying as bug because it allows user to see site level details they shouldn't

Michael HanFebruary 8, 2012 at 11:15 PM

Either don't generate link or generate link to view the site's public or private page. Probably not generating link is better and less confusing

Fixed

Details

Assignee

Reporter

Labels

Branch Version/s

6.1.x

Backported to Branch

Committed

Fix Priority

2

Git Pull Request

Components

Fix versions

Affects versions

Priority

Zendesk Support

Created February 8, 2012 at 7:07 PM
Updated June 24, 2023 at 3:55 PM
Resolved March 12, 2012 at 2:48 PM
Loading...