Website Toolbar Move and Remove Option

Thursday 08 April 2010 1:43:36 am

Hi Guys,

In my setup the editors are only allowed to remove the objects from the public website, I have not given any permission regarding moving of the objects as it is a separate policy. But I can see "Move" button working in the website tool bar. Are they (move and remove) both linked to each other.

My Policy

Output

can_remove true

can_move true

can_move_from true

Why can_move and can_move_from showing true.... I dont want to allow users to move the objects.

Is it a bug or Am I missing anything?

Cheers,

Thursday 08 April 2010 11:37:45 am

Hi John,

Is there another policy for the editors for content/remove? Other than the one specific for the Article class?

Regards Robin

Board member, eZ Publish Community Project Board - Member of the share.ez.no team - Key values: Openness and Innovation.

LinkedIn: http://nl.linkedin.com/in/robinmuilwijk // Twitter: http://twitter.com/i_robin // Skype: robin.muilwijk

Friday 09 April 2010 9:33:42 am

Yeah.

Checking the code, function canMoveFrom of eZContentObject looks like

if ( !isset( $this->Permissions['can_move_from'] ) )
{
   $this->Permissions['can_move_from'] = $this->checkAccess( 'edit' ) && $this->checkAccess( 'remove' );
}
return ( $this->Permissions['can_move_from'] == 1 );

so, it seems so. move depends on edit and remove access. if thess two policies are activated for your user (as they do) the user will get access to move function.

Saturday 10 April 2010 3:43:38 am

This also depends on the user having create access for the class in question for the target location he selects, so the logic is probably that "why limit move operation when the user can create content, copy'paste the text and so on, and delete the old content".

Not 100% sure though, this was made before my time here.

eZ Online Editor 5: http://projects.ez.no/ezoe || eZJSCore (Ajax): http://projects.ez.no/ezjscore || eZ Publish EE http://ez.no/eZPublish/eZ-Publish-Enterprise-Subscription
@: http://twitter.com/andrerom