Project titles visible for non-assigned teams

billshankley - November 10, 2009 - 15:57
Project:Storm
Version:6.x-1.24
Component:Storm Teammember
Category:bug report
Priority:normal
Assigned:Unassigned
Status:active
Description

Hi Guys,

Great work so far

I've been testing the latest dev and it still appears that the team member permissions don't do anything at all.

I've tested it using a simple scenario that I have 3 organisations, 1 person per organisation and two teams,
one person is a team member of both teams and the other 2 people are members of the seperate teams respectively.

I've set a role to allow access to storm and access to the necessary child modules with "view own" or "view if assigned to project" and added this to each user.

I can see all projects listed with these settings (although the settings I have in place suggest that I should only be able to see those i'm assigned to) and when trying to click through to the project page I get "You are not authorized to access this page."

Is this still under the knife or should it be working correctly or am I missing something?

Thanks in advance.

#1

Magnity - November 10, 2009 - 16:33

Are any of the users user/1?
Does the role have the permission to administer users?

To confirm - all projects show in lists but none can be viewed?

#2

billshankley - November 11, 2009 - 09:49

Ok to confirm,

No none of the users are user/1

Only the admin (user/1) user can administer users (admin is not one of the team members or persons in storm).

And yes all projects show in the lists but the actual page/nodes are blocked due to access restrictions..

Can you replicate the behaviour or is this just an incorrect concoction of settings?

#3

Magnity - November 14, 2009 - 12:01

Sounds like there is a bug, but I need to follow this up further to be sure...

#4

billshankley - November 16, 2009 - 12:45

Ok, well confirm and I will help test any devs.

#5

Magnity - November 19, 2009 - 18:55
Title:Storm Team Member module permissions not working» Project titles visible for non-assigned teams
Status:active» fixed

I think I've found the fault for this - and it should be fixed by the attached patch. I'd be really grateful if you could test and report back.

Meanwhile, I have committed this change to both the 6 & 7 branches.

AttachmentSize
stormteam.module.patch 756 bytes

#6

billshankley - December 1, 2009 - 14:18

Sorry for the delay,

Thanks for the work Magnity, this seems to fix the issue with showing the correct projects when being listed but it doesn't appear to solve the issue of when you try to click on a project listed to see the full project page it still returns "You are not authorized to access this page."

Again, thanks for the work and i'll continue to test any releases.

#7

Magnity - December 1, 2009 - 14:31
Status:fixed» active

OK - so the listing is correct, but for any projects listed you cannot see the project page?

#8

billshankley - December 2, 2009 - 10:04

Yes correct.

 
 

Drupal is a registered trademark of Dries Buytaert.