Thread

To understand my problem I have to tell you a bit of the topic of the site.

We’re running a music magazine.
We receive promotional cds.
Editors can select the promotional cds in an internal (front end) area called the “promopool”.
They select “promo order” and the entry switches the “author” to the editor name and the color changes to purple.
All functions are solved with ee code.

Editors have no special priviliges to select a promo.
The priviliges are
Can view weblog entries authored by others - no
Can edit entries authored by others - no
Can change the author name when posting weblog entries - no

So far BEFORE the update.

AFTER the update they get
“You don’t have the priviliges”

I have to set
Can edit entries authored by others - yes
Can change the author name when posting weblog entries - yes

Only with both on “yes” they can select promos.

I had a look in an old sql backup, they never had priviliges and it worked.

Editors must not have access to others entries and they must not edit the entries of others.

The second problem, as soon as I set
“Can edit entries authored by others - yes”
the editors can see all entries, though
“Can view weblog entries authored by others - no”

We solved our complete editorial system with these select templates, all reviews, concerts, festivals and interviews are management with it.

So it’s pretty essential to get the privileges working again.

I can provide admin access to the EE team.

I would be glad about any help.

Installed plugins
Character Limiter (v.1.0)
Magpie RSS Parser (v.1.4)
Randomizer (v.1.0)
Word Limiter (v.1.0)
XML Encode (v.1.2)
Top Authors (v.1.0)
Form_Helper (v.1.9)
Browser Sniff (v.1.0)

Installed extensions
Filter By Author (v.1.0)
Tag Submit (v.2.6.4)
LG Add Sitename (v.1.0.1)
Multiple Newsletters (v.1.1)

What did you update from?

-greg

ExpressionEngine1.6.7 20090320

The only thing I changed at the update was, that I deleted everything how it is written in the update guide.
All updates before I have overwritten the ee installation and let the plugins etc in the installation.

Ronin_23,

I know there was a security update in the area of privileges. I will just follow up on it with the dev team to see if it would affect your setup and get back to you here in this thread.

Hi John,

thank you. Do you have news for me?

I can provide admin access if the ee dev want to see it for themself.

Ronin,

When you say “they select promo order and the entry switches the author to the editor name and the color changes to purple”, how are you achieving that? A custom extension? Whatever it is, we’ll need to try without that in place.

no, it’s really simple ee code 😊

I have an user with a question mark as name. With this account I fill in all new entries.
The new entry gets the status “prompool”, gets the color “red” and the editor sees the assigned editor is “?”, so it is still available.

Ronin_23,

OK, slightly confused. So let me get this straight. You are basically using a SAEF for your editors so that they can change the status of a weblog entry when they are checking out/taking ownership of a demo?

Have you got the default status group set for that weblog?

Admin ›  Section Administration ›  Section Management ›  Edit Group Preferences

John, yes you’re right.
It’s just SAEF.
The weblog has the status group “Reviews”.

If an editor likes to review an album, he chooses “Promo Bestellung” (=Promo Order) and he’s now the new owner and the status changes to Promo Order, the background color changes to purple.
Later as he has received the album, he writes the review in this entry in the backend.

I think it’s very similar to the ee bugtracker.

Have a look at this screenshot
http://www.necroweb.de/images/diverse/ee/promopool-privileges.jpg

Ronin_23,

have you tried the following combination?

Can edit entries authored by others - no
Can change the author name when posting weblog entries - yes

Yes, John I had tried this, before I posted this issue.

Don’t get me wrong, but it is now the ninth day and there are known changes by the ee dev team to the privileges section.

As I already said, I had a look in the backup to be on the safe side.

So when can we start bug hunting and let the expressionengine beginner question behind us. 😉

Ronin - I’m still not following what you actually want to happen here.

This is what I believe is happening.

Editors can select the promotional cds in an internal (front end) area called the “promopool”.
They select “promo order” and the entry switches the “author” to the editor name and the color changes to purple.
All functions are solved with ee code.

1. You have weblog entries entered by User named “?”, then editors, using a Stand Alone Edit Form, should be able to view those entries in order to change the status.

Is that correct?

Right now you have it set so that the Editor Member Group can not see entries by anyone other than themselves, and can not change the author.  Before they could still do this anyway, but now they can’t, is that right?

It seems to me like EE is working quite as expected.  Why not simply set the member group permissions so that your editors can do what you need them to?

Lisa, yes you’re right.

If I have to set

Can edit entries authored by others - yes
Can change the author name when posting weblog entries - yes

Every editor sees all reviews in the backend and can edit everything.

With these settings they can see all entries, though “Can view weblog entries authored by others” is set to no.

I don’t know why this is so, but I want the editor to see only his articles and edit only his articles.

OLD:
Til now, the editor log in, order something in the frontend and look in the backend edit section, which reviews he has yet to do.
The editor can only see his own articles and edit his own articles.

NEW:
With the new settings the editor sees everthing of every other editor.
He can edit entries from others and can also change the author of other articles.

We have more than 5500 articles in more than 20 weblogs and a privileges and workflow sytem with 16 member groups.
A review procedure runs with a workflow of 10 statuses, beginning with the file and order of the CD, writing the review, editing and release.

20 people (with not well computer experienced people among them) who can edit every article.
This is horrible to me.

I hope you can understand now my problem. 😊

Ronin - but you want them to see articles created by authors, correct?

With these settings they can see all entries, though “Can view weblog entries authored by others” is set to no.

In the front-end or back-end?  That setting affects only the control panel.

Also, have you seen NSM Publish Plus? it gives some more in-depth work-flow abilities.

The editor sees in the frontend only the entries with the statuses he needs to select a CD out of the promopool, like “Promopool” “Promo Order” “Label Order”.
As he receives the CD, he edits the entry in the backend which he selected/ordered before in the frontend.
Written reviews are not listed in the frontend promopool page, just physical available CDs.

I understand that EE privileges now work as they should.

Authors should only have the privilege to take over an article with these settings.

Can edit entries authored by others - yes
Can change the author name when posting weblog entries - yes

So far I agree.

But with the setting

Can view weblog entries authored by others - no

The author should not see entries authored by others, but he does in the set-up of above.

Something he can not see in the backend, he can not edit in the backend.

And the problem would be solved.

Thanks for the hint @NSM Publish Plus, looks very useful 😊