You are here: Foswiki>Tasks Web>Item9847 (22 Dec 2010, MichaelDaum)Edit Attach

Item9847: Topics don't inherit access control settings from template topics when saved with NatEdit

pencil
Priority: Urgent
Current State: Closed
Released In: n/a
Target Release: n/a
Applies To: Extension
Component: NatEditPlugin
Branches:
Reported By: HolstenerLiesel
Waiting For:
Last Change By: MichaelDaum
Updated with new info concerning NatEditPlugin

Expected behaviour

Access controls for a template in META data should be passed on to the topics created from them. For example a template with %META:PREFERENCE{name="ALLOWTOPICVIEW" title="ALLOWTOPICVIEW" type="Set" value="Main.SomeGroup"}% set should result in a topic with the same access controls in the meta data. This works fine with the standard editor. Using NatEdit it doesn't happen.

Test case

In an environment using NatSkin and NatEditPlugin I set up a TestGroup and a TestTemplate with nothing but %META:PREFERENCE{name="ALLOWTOPICVIEW" title="ALLOWTOPICVIEW" type="Set" value="Main.TestGroup"}% in it. A topic created using TestTemplate has no access controls set in the meta data. This is probably due to NatEdit's own permissions feature not correctly loading the meta data or wiping them clean.

It is of course still possible to put the following into the template text:
%ME%NOP%TA:PREFERENCE{name="ALLOWTOPICVIEW" title="ALLOWTOPICVIEW" type="Set" value="Main.TestGroup"}%
This will then expand into the correct setting upon topic creation. However it exposes the access setting during the first ordinary editing.

-- HolstenerLiesel - 19 Oct 2010

I have tried to reproduce this and when I test I can create a topic based on a template with ALLOWTOPICVIEW in the template meta.

As long as the user creating the new topic has read access to the template the new topic is created WITH the access setting.

And also, I checked that if the topic template is not readable by this user, he is refused to create a copy of it which is important for security.

-- KennethLavrsen - 19 Oct 2010

This appears to have been caused by using NatEditPlugin to save the new topic. Updated the report accordingly (updates in italics).

-- HolstenerLiesel - 19 Oct 2010

Seems to be a duplication of Item9766.

Please check latest release.

-- MichaelDaum - 22 Dec 2010

ItemTemplate edit

Summary Topics don't inherit access control settings from template topics when saved with NatEdit
ReportedBy HolstenerLiesel
Codebase 1.1.0
SVN Range
AppliesTo Extension
Component NatEditPlugin
Priority Urgent
CurrentState Closed
WaitingFor
Checkins
TargetRelease n/a
ReleasedIn n/a
Topic revision: r5 - 22 Dec 2010, MichaelDaum
The copyright of the content on this website is held by the contributing authors, except where stated elsewhere. See Copyright Statement. Creative Commons License    Legal Imprint    Privacy Policy