Permission issue with 'insert link to page'

Permalink 1 user found helpful
I'm not sure if this is a bug, or if I'm just doing something wrong.

I'm using advanced permissions. If I log in under 'admin' then everything works properly.

If I log in as a different user though (who's a member of a group with editing access to just a couple of pages on the site), then if I click the 'Insert link to page' button in the text editor, I get 'unable to load sitemap data. Response received: Access Denied'.

I'm sure it's down to not having the right permissions set up for the user, but I'm not sure what I'm missing. Any ideas?

 
Mnkras replied on at Permalink Reply
Mnkras
i think thats a bug i would report it
frz replied on at Permalink Reply
frz
what version of c5?

have you cleared out your site cache?
cmbt replied on at Permalink Reply
Version 5.3.2 - is hosted by getconcrete, so don't think I can try this on a more recent version.
I suspected the cache as well so I've cleared it (and even turned it off) but am getting the same behaviour.
frz replied on at Permalink Reply
frz
Oh, if we're hosting it we can look into it and see what's off. Contact me via email with your site information, franz at concrete5.org
AP604 replied on at Permalink Reply
I am also getting this issue.

If I log in as a user who has read-only permissions to half of the website and edit permissions for the other half, I can't add a link to a "read-only" page.

This seems like a bug to me -- surely I should be able to link to a page that I have read-only access to.

What am I doing wrong?
frz replied on at Permalink Reply
frz
sounds like a different issue..

you're saying as an editor, you don't see links to pages you dont have access to in the sitemap when making a link in the content block?
AP604 replied on at Permalink Reply
Yep, as an editor, when I try to add a link to another page, the site map doesn't appear after clicking on "insert link to page".

Instead, I get this error message:

Unable to load sitemap data. Response received: Access Denied.

Editors on the site shouldn't have permissions to modify the site map as such, but they need to be able to add links to other pages.

Please help! Thanks!
frz replied on at Permalink Reply
frz
that is odd..

i thought you were saying that pages they didn't have access to didn't show up but others did, which made more sense.. hrm
AP604 replied on at Permalink Reply
And not sure if this is related, but as an editor, when I try to edit an existing block on a page that I have permissions to edit, I get a an error message saying "Access Denied".

Could I perhaps email you login info to my site so you can see it in action?
donvaughn replied on at Permalink Reply
I know this thread is a bit old now, but I am now having this problem too.. or it seems to be this problem. I am, however, only getting the "Access denied" message when clicking on "Add link" in TinyMCE. I first found this error on an existing site, even after trying Andrew's fix. I then tried it on a fresh install and got the same error. Here's what I am doing to create the error:

1. Install C5 (no auto content)
2. Add advanced permissions model in site.php
3. Create "Editors" user group
4. Create new user, adding them to Editors
5. In Sitemap > Home (right click) > Set Permissions, add Editors group, giving access to all but delete and admin.
5. Still in Sitemap > Show System Pages (check) > Dashboard > Sitemap (right click) > Set Permisions > select manually > add Editors group > give read access to Editors group
6. Although there shouldn't be a cache yet (I haven't viewed any pages yet), I clear it anyway.

At this point, when I log in as my new editor user, I get the aforementioned error in TinyMCE (from content block).

Although you said, Andrew, that your solution is not ideal, it's a thousand times better than the only solution I can think of, which is to give the editors admin access.

Can anyone see a step I missed? Should I be reporting this as a bug?
andrew replied on at Permalink Reply
andrew
This is not ideally, obviously, but I think the problem is that, for right now, for users and groups to access the sitemap in the text editor, they need to have read access to the sitemap page in the browser.

1. Login as admin
2. Go to /dashboard/sitemap.
3. Click "show system pages."
4. Highlight Dashboard > Sitemap, click, and select "Permissions."
5. Use the grid to give the editors group(s) read access to that page.

now they should have access to the sitemap (whatever pages they can read) from within TinyMCE. Obviously this isn't ideal, but permissions-wise the sitemap page in the dashboard shouldn't let you do anything that your permissions won't let you do in the site - this is just an extra layer for those who don't want that level of site architecture to be visible to their editors at all. In the future we will try to treat this more like the file manager, which has a separate "search" permission set controlling whether the search interface (in this case, the sitemap) is available from external locations within the concrete5 interface.

Whew! That was a mouthful.
AP604 replied on at Permalink Reply
Thanks so much for your thoughtful reply, Andrew. I followed your instructions, but still get the same error message when the sitemap should appear.

"Unable to load sitemap data. Response received: Access Denied."

Any other ideas?
kino replied on at Permalink Reply
kino
are your site accessible from internet?

For example, why not set the basic authentication, etc.?
AP604 replied on at Permalink Reply
It's an Intranet, with some users having read-only access to certain sections, and edit access to other sections. The general public has no access.
frz replied on at Permalink Reply
frz
did you clear the site cache?

sometimes when you make permission changes you have to clear the site cache for them to take effect...

dashboard > sitewide settings > debug
cmbt replied on at Permalink Reply
Thanks Andrew - I've gone through the steps and this has fixed the problem for me.
zoinks replied on at Permalink Reply
I have given Editor Permissions in FOUR DIFFERENT PLACES!

1. Sitewide Settings > Access
2. Sitewide Settings > Other Permissions (gave all the same as Admin)
3. Sitemap > System Pages > Sitemap & File Manager (all of these pages, including children)
4. Sitemap > Access - added Editor group and checked "Acess Sitemap and Page Search"

I can NOT add a Page Link through the TinyMCE editor.

I CAN add a page link through JordanLev's Designer Content block.

WHY?!