Bug #23655 Bug Fixed

When member group can’t “View/Send cached email”, menu item still appears

Version: 4.3.1 Reporter: Hop Studios

User is in a member group that cannot View/Send cached email, but can see the Communicate page. The “Sent” menu option appears, and when clicked tells the user:

Error: You are not allowed to view the email cache.

https://www.dropbox.com/s/oackf3mi6yu4qmw/Screenshot%202018-07-03%2011.47.07.png?dl=0 https://www.dropbox.com/s/rdc763n8np27sfw/Screenshot%202018-07-03%2011.46.48.png?dl=0 https://www.dropbox.com/s/7u0sr5an8ycdiih/Screenshot%202018-07-03%2011.48.13.png?dl=0

I would think that this menu item should disappear when not permitted. But is it a bug? Hmmmm.

TTFN Travis

  • Definitely a bug, we really shouldn’t let you get on a disallowed page via navigation.

    I’ve got it fixed up for the next release- ‘sent’ only shows if they have permission to resend cached emails, consistent with the permission check on that section.

    There’s a code patch in ‘solution’ as well.

    Thanks for the heads up!

    Robin Sowell
    03rd July, 2018 at 4:13pm

You must be signed in to comment on a bug report.

  • In system/ee/EllisLab/ExpressionEngine/Controller/Utilities/Utilities.php around line 52

    $sidebar->addHeader(lang('communicate'), ee('CP/URL')->make('utilities/communicate'))
           ->addItem(lang('sent'), ee('CP/URL')->make('utilities/communicate/sent'));

    change to

    $left_nav = $sidebar->addHeader(lang('communicate'), ee('CP/URL')->make('utilities/communicate'));
          if (ee()->cp->allowed_group('can_send_cached_email'))
            ->addItem(lang('sent'), ee('CP/URL')->make('utilities/communicate/sent'));
.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases