Developer forum

Forum » Dynamicweb 10 » Do not allow publish to channel

Do not allow publish to channel

Justin Sjouw Dynamicweb Employee
Justin Sjouw
Reply

I think this might be a bug. I have a user with only read permissions on a channel. The user can login, and indeed not change products inside the channel.

But I can go to All Products, Pick a product, and publish the product to the channel to which I have read access, which I think should not be possible.

Justin 


Replies

 
Oleg Rodionov Dynamicweb Employee
Oleg Rodionov
Reply

the issue is reproduced, I've created task #26543 to have PM resolution it's bug or is not.  Note it can be limitation for Actions menu in "All products" list, since even e.g. "Read" parent permissions are not applied there in Actions now. Extra note that products belongs to channels are under different permissions can be marked in the list as well, context menu are always valid in the case.

BR, Oleg QA

 
Søren Jensen Dynamicweb Employee
Søren Jensen
Reply

Hi Justin,

It works as intended 

On solutions, where it is wanted to use Permissions to control access to maintain Product enrichment, you should remove/hide the "All products" node.

"All products" are not covered by the Permission functionality, so there would always give access to maintain Product informations (like in DW9)

To use Permission on "All products", please turn on "Capability Control" in "Settings/Administration/Feature Management"

/Søren

 

You must be logged in to post in the forum