ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Able to create new entry via cp when group permissions are set to not allow it

September 20, 2011 9:15pm

Subscribe [3]
  • #1 / Sep 20, 2011 9:15pm

    guru24

    40 posts

    When an edit only group has been set up to not allow new entries to be created, it is still possible for a member in this group to create a new entry via the cp crumbtrail: Content -> Edit, edit any entry, then click ‘Publish’ in the crumb trail. This presents the ‘Choose a channel to post in’ menu from which a new entry can be created. CP access for the group is set as follows: Access content section: Yes; Access content publish: No; Access content edit: Yes; Channel Assignment, post and edit entries: Yes.

    Could this be a bug or just an option in my group settings?

    EE2.2.2, MSM2.10

  • #2 / Sep 21, 2011 11:16am

    Mark Bowen

    12637 posts

    Hi guru24,

    As you have selected Can post and edit entries in for that Channel then yes users will definitely still be able to Publish to that Channel.

    The Can access CONTENT: Publish is really just to take away the main Publish menu.

    I do see this as being a slight bug though so I’ve reported that here for you.

    Thanks,

    Mark

  • #3 / Sep 22, 2011 8:47am

    guru24

    40 posts

    Hi guru24,

    As you have selected Can post and edit entries in for that Channel then yes users will definitely still be able to Publish to that Channel.

    The Can access CONTENT: Publish is really just to take away the main Publish menu.

    I do see this as being a slight bug though so I’ve reported that here for you.

    Thanks Mark.

    I guess it makes sense that post and edit entries: Yes would allow new entries to be created, but all other settings suggest that posting can be prevented while still allowing edits (publish: no), and this can almost be achieved apart from posting access via that one crumbtrail link.

    It seems odd not to have an edit only permission; or at least publish: no should actually do what the setting suggests.

  • #4 / Sep 22, 2011 6:27pm

    Kevin Smith

    4784 posts

    Agreed, the settings language here could be improved upon. I’ll make sure James, our resident user experience expert, sees this. Thanks for bringing it to our attention!

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases