I’ve noticed a number of permission issues (at least in 3 and 4). l3mnu.php, for example, has this:
<?php if($modx->hasPermission('new_user') || $modx->hasPermission('edit_user') || $modx->hasPermission('new_role') || $modx->hasPermission('edit_role') || $modx->hasPermission('access_permissions')) { ?>
<td class="menuHeader"><?php echo $_lang["users"]; ?></td>
<?php } ?>
It doesn’t allow for a role that allows web user management, but not manager user management. The same in the actual links for the user management section;
<?php if($modx->hasPermission('new_user') || $modx->hasPermission('edit_user') || $modx->hasPermission('new_role') || $modx->hasPermission('edit_role') || $modx->hasPermission('access_permissions')) { ?>
<td valign="top">
Is there some reason for this, or is it just an oversight and should get noted in the bug tracker?
I’ve also reworked l4mnu.php so that it actually works, and works in IE as well.
☆ A M B ☆
MODX Staff
