I have pretty much been able to figure out security/permissions in Revo except for one thing. A user group that has permission to access a child resource but not the parent resource will not have the child resource show in the resource tree in the manager. To expound, I have the following resources:
Parent 1
Parent 2
++ Child 1
++ Child 2
Parent 3
Parent and child resource permissions are given to superusers (0).
Child resource permissions under parent 2 are given to managers (5).
Logging into mgr as a manager will not show the child resource. The child resources will only show in the resource tree to edit if permissions to Parent 2 have also been given to managers. It seems that there is a bug in the resource tree itself in the way it displays resources parent-child. I don’t think it can physically display the child if their is no permission to display the parent. I say this because if I enter the direct link (URL/manager/?a=30&id=4) with the id of the child resource I can edit the child resource. However, it will not show in the resource tree because the parent is not visible.
Is there any way to fix this issue with the way the resource tree displays? I’m open to ideas...
Wouldn’t giving the Managers access to the parent with just "load," "list," and "view" permissions do it (or maybe just load)?
There’s a similar issue that I’ve been experiencing in Evo. Not sure how much development time Evo is getting these days, but, I’ve had to give all of my editors permission to a mutual parent of each of their "sections" in order that they can SEE their resources, in the resource tree. I’d rather not give them permission to that parent at all, but I had to in order to make it work - so I prefixed the title with "DO NOT EDIT"
Is that something worth filing as a bug as well?
Des
webandflowdesign.com
