×
Please submit new Bug Reports on GitHub: github.com/Jensen-Technologies/component-creator-issues/issues
Debate: handling unpublished items
Jonas Fagnastøl Henriksen
New Member
Posts: 15
pred 9 rokmi 6 mesiacmi - pred 9 rokmi 6 mesiacmi #786
od Jonas Fagnastøl Henriksen
Debate: handling unpublished items bolo vytvorené Jonas Fagnastøl Henriksen
My view:
There is a bug in component-creator that allows an unprivileged user access to items that are unpublished and trashed, through the direct link ( similar to http://mysite.no?option=com_mycomponent&view=myview&id=15 ). I regard this a serious issue, and has reported the bug to component-creator. However, Victor, handling the bug report at component-creator, means that the item should be available through the direct link, but not listed in category-listing or similar. He suggested I post the dispute to the forum, so here we are.
It should be noted that all core components in joomla deny unprivileged users to access unpublished and trashed items.
Everyone in support of not allowing any users to view your trashed or unpublished items, raise your hands!
There is a bug in component-creator that allows an unprivileged user access to items that are unpublished and trashed, through the direct link ( similar to http://mysite.no?option=com_mycomponent&view=myview&id=15 ). I regard this a serious issue, and has reported the bug to component-creator. However, Victor, handling the bug report at component-creator, means that the item should be available through the direct link, but not listed in category-listing or similar. He suggested I post the dispute to the forum, so here we are.
It should be noted that all core components in joomla deny unprivileged users to access unpublished and trashed items.
Everyone in support of not allowing any users to view your trashed or unpublished items, raise your hands!
Posledný krát upravené:pred 9 rokmi 6 mesiacmi Jonas Fagnastøl Henriksen
Prosím Prihlásiť alebo Registrácia pre zdieľanie konverzácie.
Andres Maeso
Platinum Member
Posts: 338
pred 9 rokmi 6 mesiacmi #787
od Andres Maeso
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Táto e-mailová adresa je chránená pred spamovacími robotmi. Na jej zobrazenie potrebujete mať nainštalovaný JavaScript.
Odpoveď od Andres Maeso na tému Bug handling unpublished items
Hi Jonas!
Should I move to the Feature requests forum? I think it will get more traction. And instead of bug, I would write "Debate", so everybody understand their opinion is required.
Let me know and I will do it asap.
Should I move to the Feature requests forum? I think it will get more traction. And instead of bug, I would write "Debate", so everybody understand their opinion is required.
Let me know and I will do it asap.
Andrés Maeso
Customer relations manager at Joomla Component Creator.
Táto e-mailová adresa je chránená pred spamovacími robotmi. Na jej zobrazenie potrebujete mať nainštalovaný JavaScript.
Prosím Prihlásiť alebo Registrácia pre zdieľanie konverzácie.
Randy Carey
Junior Member
Posts: 23
pred 9 rokmi 6 mesiacmi #795
od Randy Carey
Odpoveď od Randy Carey na tému Bug handling unpublished items
I know CC wants to build their components to be aligned with how core components do it.
It is my understanding that (in core components) the front-end model will not serve up an article if it is not either published or archived. Here is code from the article model that builds the SQL for retrieving the requested article:Obviously, if a person has permission to edit, delete, or change state on this item, then this person should be able to see the item (at least backend, perhaps front-end as well). But it seems to me that if an item is not either published or archived, then any front-end link to this item should not display the article (unless it is for the user to edit it), and the model should return an error message similar to how that core components do:
It is my understanding that (in core components) the front-end model will not serve up an article if it is not either published or archived. Here is code from the article model that builds the SQL for retrieving the requested article:
if (is_numeric($published)) {
$query->where('(a.state = ' . (int) $published . ' OR a.state =' . (int) $archived . ')');
}if (empty($data)) {
return JError::raiseError(404, JText::_('COM_CONTENT_ERROR_ARTICLE_NOT_FOUND'));
}
Nasledujúci užívateľ(ia) povedali ďakujem: Andres Maeso
Prosím Prihlásiť alebo Registrácia pre zdieľanie konverzácie.
Čas vytvorenia stránky: 0.051 sekúnd