[3.x] Slight inconsistency in the access permissions for com_cpanel

Did you find a bug in Joomla! 3.x but aren't sure? This forum is the place to help figure out if the problem is a bug and how to report it. If you are an experienced Joomla! user and are certain that you have found a bug please use the Bug Tracker to submit your issue.
This forum is for discussion about bugs and to get help with reporting them to the Bug Tracker: https://issues.joomla.org

Moderator: ooffick

Forum rules
Please use the official Bug Tracker to report a bug: https://issues.joomla.org
Post Reply
Mr. Wimpy
Joomla! Explorer
Joomla! Explorer
Posts: 282
Joined: Fri Dec 02, 2005 10:46 am
Location: The Netherlands

[3.x] Slight inconsistency in the access permissions for com_cpanel

Post by Mr. Wimpy » Fri Jul 21, 2017 9:31 am

When Managers log in into the backend they arrive on the control panel, but when using a custom admin menu with a Control panel menu item this item is hidden. You would expect that if a Manager can see the control panel on login they would also be able to see the menu item.

The reason is the permission for Access Administrator Interface. It is set to Inherit (Not allowed).
For com_cpanel this has to be set globally which has consequences down the line.

As anyone with permission to login to the backend arrives on the Control panel, this permission seems unnecessary on com_cpanel.

How to reproduce:
1. Create a custom admin menu and set it to access level special (set the original admin menu to super, to prevent mixups)
2. Create a menu item of type Control panel
3. Create a user in user group Manager
4. Login with the new user

You are on the control panel, however you can't see the new Control panel menu item.

5. Login as super
6. Go to Permissions in Global configuration
7. Set Access Administrator Interface for Managers to Allowed
8. Log back in as Manager

You are on the control panel, and now you can also see the new Control panel menu item.

Tested on Joomla 3.7.3/3.7.4-rc1

Post Reply

Return to “Joomla! 3.x Bug Reporting”