Uploaded image for project: 'JCommune'
  1. JCommune
  2. JC-906 View_Topic permission improvements
  3. JC-1009

User without VIEW_TOPIC permission can see topics if he goes througth the direct link

VotersWatchers
    XMLWordPrintable

    Details

    • Type: Sub-task
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.20 Larks
    • Fix Version/s: 0.20 Larks
    • Labels:
      None
    • Sprint:
      1.7 Larks, 1.8 Larks, 1.9 Larks, 2.1 Larks

      Description

      Create a user without VIEW_TOPIC permission for a Branch (you can use anonymous also) and go through the direct link to topic in this branch(like http://uat.jtalks.org/jcommune/topics/30).

      Expected, that "Access denied" page is shown

      User without VIEW_TOPIC permission can see topics in case he go through the direct link; Access denied page is shown just if he try to open branch page via breadcrumbs

        Attachments

          Issue Links

          relates to

          Sub-task - The sub-task of the issue JC-907 Hide section in case user haven't got permissions to see branches in this section

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Test - Automated or manual test JC-1010 [Test] "Access denied" page should be shown in case user without VIEW_TOPIC permission goes througth the direct link and have

          • Major - Major loss of function.
          • Closed

            Structure

              Activity

                People

                • Assignee:
                  julik Julia Atlygina
                  Reporter:
                  julik Julia Atlygina
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Structure Helper Panel