Permissions Bug - I think

[Netspud2K]

Hi All,

I think I have found a bug in the permissions. Firstly let me explain what I am trying to do:

I want to give certain user access to certain jevents categories, but not to others. So lets say we have two users (user 1 and user 2), and two categories (cat 1 and cat 2)

I want user 1 to have access to cat 1 only
I want user 2 to have access to cat 2 only

Both users are members of the joomla manager group.

Using JEvents Authorised Users I give user 1 the following:

User enable
Can create events
can publish own
can delete own
can edit all
can delete all

Under available cats I give user 1 access to Cat 1 only.
Applicable calendars: all.

The problem is user 1 also has access to cat 2 as well.

I have created a Joomla sub group off of manager (call it events group) and denied everything except Access Administrator Interface*. That just block everything.

*If you are wondering why Access Administrator Interface access was given, without it, I can't access the user under JEvents Authorise Users.

So in short it is either all or nothing.

Perhaps I am missing, the point, but from my perspective one or the other should work, otherwise what is the point of having JEvents Authorised Users.

Please let me know if I have not been clear, please let me know if I am just missing the obvious or just being plain stupid.

Thanks

Stephen

[Tonyp]

Hello,

Can you post the 'Support Forum Version Information' please from JEvents?

If you selected calendar A and not B in his permissions he should not be able to access both, can you confirm Authorised User Mode Is enabled in the permissions Tab on Jevents Configuration?

[Netspud2K]

Hi Thanks for your reply.

Joomla : 2.5.6
component_com_jevents : 2.1.19
module_mod_jevents_cal : 2.1.3
module_mod_jevents_latest : 2.1.6b
plugin_editors_jce : 2.2.4
plugin_search_eventsearch : 2.1.2 (not enabled)

Authorised user mode was not turned on, but it made no difference (unless the sub user group should have everything denied except Access Administrator Interface).

Finally are you saying I can not restrict categories, only calendars? Everything is working off of a single calendar, divided up into categories.

Thanks

Stephen

[Tonyp]

Joomla permissions are hierarchy based. If you added the users to the authorised users in jevents and enabled authorised user mode you will get your desired effect.

Regards
Tony

[Geraint]

I think there is possibly some confusion between viewing and managing/creation permissions.

The authorised user permissions (and the category/calendar section in particular) relate to creating and managing events not the viewing events.

To control the viewing of events you need to use the joomla viewing access levels.

Alternatively if you want private events then you could use the 'user specific events' plugin which allows you users to create events that only they can see (and there is a setting to make this the default or even to force this setting).

[Netspud2K]

Hmmm,

Most strange, after redoing some of the permissions, it seems to be working now.

It would appear for some reason some rights were being inherited that should not have been. Possible a Joomla bug? Possible a problem cause by a page not loading properly.

Anyway it is now working for me, thank you.

If I work out what happened, I will let you know for future reference.

[Tonyp]

Glad to hear,

Joomla! Permissions can get very confusing

Regards
Tony