double_top.tpl does not obey permissions

Next topic

Author	Message
James Ward	Friday 01 September 2006 12:06:57 pm Hi all, I changed my anonymous user to only have access to user, login and set my site.ini to requireuserlogin. This gave me the login menu I expected. I did not however expect the top menu to continue to list all areas of my site. I thought the fetch would not retrive any of areas which the annonymous user did not have access to. Is there a way I can make the double_top.tpl behave as I expected? working at www.wardnet.com blogging at www.jamesward.ca
Claudia Kosny	Saturday 02 September 2006 3:19:50 am Hello James it seems that this is a bug in EZ. If a user does not have any content read permissions at all, the limitationlist is set to false which again causes the sql limitation string to be empty. And an emtpy permission string means no restrictions. It is roughly similar to this bug: http://ez.no/community/bugs/role_permissions_problem_fetching_information_without_permissions so you might want to update this one with your information or create a new one. A workaround should be to give the user a new role which has content read permissions limited to some obscure class which you never use (you might need to create such adummy class beforehand). Greetings from Luxembourg Claudia
Kristof Coomans	Monday 04 September 2006 1:47:35 am You can check first if the user is logged in: {if $current_user.is_logged_in} {* place menu code here *} {/if} independent eZ Publish developer and service provider \| http://blog.coomanskristof.be \| http://ezpedia.org

Author

Message

Friday 01 September 2006 12:06:57 pm

Hi all,
I changed my anonymous user to only have access to user, login and set my site.ini to requireuserlogin. This gave me the login menu I expected.

I did not however expect the top menu to continue to list all areas of my site. I thought the fetch would not retrive any of areas which the annonymous user did not have access to. Is there a way I can make the double_top.tpl behave as I expected?

working at www.wardnet.com
blogging at www.jamesward.ca

Claudia Kosny

Saturday 02 September 2006 3:19:50 am

Hello James

it seems that this is a bug in EZ. If a user does not have any content read permissions at all, the limitationlist is set to false which again causes the sql limitation string to be empty. And an emtpy permission string means no restrictions.
It is roughly similar to this bug:
http://ez.no/community/bugs/role_permissions_problem_fetching_information_without_permissions

so you might want to update this one with your information or create a new one.

A workaround should be to give the user a new role which has content read permissions limited to some obscure class which you never use (you might need to create such adummy class beforehand).

Greetings from Luxembourg

Claudia

Kristof Coomans

Monday 04 September 2006 1:47:35 am

You can check first if the user is logged in:

{if $current_user.is_logged_in}
{* place menu code here *}
{/if}

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

eZ debug

Timing:	Jan 18 2025 18:15:39
Script start
Timing:	Jan 18 2025 18:15:39
Module start 'layout'
Timing:	Jan 18 2025 18:15:39
Module start 'content'
Timing:	Jan 18 2025 18:15:40
Module end 'content'
Timing:	Jan 18 2025 18:15:40
Script end

Main resources:

Total runtime	0.7129 sec
Peak memory usage	4,096.0000 KB
Database Queries	59

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0054	588.0469	152.6406
Module start 'layout'	0.0054	0.0025	740.6875	39.4766
Module start 'content'	0.0080	0.7036	780.1641	573.4063
Module end 'content'	0.7115	0.0014	1,353.5703	12.1250
Script end	0.7129		1,365.6953

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0031	0.4371	16	0.0002
Check MTime	0.0013	0.1860	16	0.0001
Mysql Total
Database connection	0.0008	0.1122	1	0.0008
Mysqli_queries	0.6641	93.1471	59	0.0113
Looping result	0.0010	0.1393	57	0.0000
Template Total	0.6885	96.6	2	0.3443
Template load	0.0019	0.2638	2	0.0009
Template processing	0.6866	96.3087	2	0.3433
Template load and register function	0.0001	0.0147	1	0.0001
states
state_id_array	0.0007	0.0924	1	0.0007
state_identifier_array	0.0008	0.1080	2	0.0004
Override
Cache load	0.0015	0.2161	20	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0008	0.1175	3	0.0003
Fetch class attribute name	0.0011	0.1517	5	0.0002
XML
Image XML parsing	0.0012	0.1673	3	0.0004
class_abstraction
Instantiating content class attribute	0.0000	0.0012	5	0.0000
General
dbfile	0.0010	0.1387	22	0.0000
String conversion	0.0000	0.0012	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
2	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
3	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
2	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
4	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
1	content/datatype/view/ezxmltags/literal.tpl	<No override>	extension/community/design/standard/templates/content/datatype/view/ezxmltags/literal.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 14 Number of unique templates used: 7

Time used to render debug report: 0.0002 secs