1. Jan
  2. Bug report
  3. Saturday, 09 November 2019
  4.  Subscribe via email
Hello everyone,

We have issues with the Matukio permission system.
We want to enable our users to create events themselves.
However, they should only be able to edit their own events and thus not get into each others way.
In the backend, there is an option to give users the permission to edit their own events.
Another permission option is to create events.
When assigning these permissions to a user, he should be able to create events in the frontend and edit these events.
He should not be able to edit any other events.

However, the button to create events is not available to those users in the frontend.
When checking the source code, it becomes apparent why this is the case:
com_matukio/views/eventlist/tmpl/bootstrap3.php

<?php if (JFactory::getUser()->authorise('core.edit', 'com_matukio')): ?>
<a class="btn btn-default"
href="/<?php echo MatukioHelperRoute::getEventEditRoute(); ?>"
title="<?php echo JTEXT::_('COM_MATUKIO_NEW_EVENT'); ?>">
<?php echo JTEXT::_('COM_MATUKIO_NEW_EVENT'); ?>
</a>
<?php endif; ?>

This shows that the edit option is only shown to users with the core.edit permission.
However, this permission automatically allows editing of all other events, which reduces the edit own and create permissions to absurdity.

Please fix this bug and allow users with proper permissions (create events, for example) to create events.

Best,
Jan


There are %s replies to this question. If you want to see them you need a valid subscription.
If you have a valid subscription, please login now.
Visit store now

Last questions

Your compojoom.com site certificate has expired.
FYI - Your compojoom.com site certificate has expired. Noticed when the update s...
3 Replies
Posted on Monday, 24 February 2020
  • Resolved
  • New
  • Black page instead of StreetView
    Hello, StreetView on my web site stopped working, shows only black background. ...
    10 Replies
    Posted on Thursday, 19 December 2019
  • Resolved
  • Paypal "amount_error"
    Hallo, bei der Zahlungsabwicklung via Paypal erhalte ich nach der Weiterleitu...
    4 Replies
    Posted on Friday, 21 February 2020
  • Resolved
  • New
    • #PayPal
    Changing file attachment access level in an event
    Hi Daniel and Yves Something I'd noticed occasionally which annoys our users. U...
    8 Replies
    Posted on Thursday, 18 April 2019
    Support integration with OpenStreetMap & EasyS
    HI I have two questions. Is Hotspot also avaible to use with OpenStreetMa...
    2 Replies
    Posted on Tuesday, 18 February 2020
  • Resolved
    • #open street map
    • #lefleat
    • #EasySocial