this line in mutate_content_dynamic.php:
<?php
// Skip the access permission if the user doesn't have access...
if ((!$isManager && $row['private_memgroup'] == '1') || (!$isWeb && $row['private_webgroup'] == '1'))
continue;
gives problems in the next case:
when a manager user is put in a docgroup then he/she can only edit the documents that are in that group or that are public manage docs. this is good.
now when the roles for that manager user group has no rights to set the permissions (that is what we use the most) then all new documents made by that usergroup are publick instead of taking the permissions from the parent. but when the usergroup is alowed to set document permissions the rights are inherited from the parent, but this causes another problem (alowing to set doc permisiions)
1. the user could make the new doc belong to any group
2. the user can uncheck the group that he is in, and this results in to a document the user made but can not access anymore.
a solution would be to hide the form part that sets the permissions (not realy save) or to somehow set the rights withoud the fields
or disable the checkboxes (or atleast one) where the user is a member of so that he/she can never lock him/her self out by unchecking the group that he/she is in.
Dimmy
http://svn.modxcms.com/jira/browse/MODX-516
