Permission issue with 'insert link to page'
Permalink 1 user found helpful
I'm not sure if this is a bug, or if I'm just doing something wrong.
I'm using advanced permissions. If I log in under 'admin' then everything works properly.
If I log in as a different user though (who's a member of a group with editing access to just a couple of pages on the site), then if I click the 'Insert link to page' button in the text editor, I get 'unable to load sitemap data. Response received: Access Denied'.
I'm sure it's down to not having the right permissions set up for the user, but I'm not sure what I'm missing. Any ideas?
I'm using advanced permissions. If I log in under 'admin' then everything works properly.
If I log in as a different user though (who's a member of a group with editing access to just a couple of pages on the site), then if I click the 'Insert link to page' button in the text editor, I get 'unable to load sitemap data. Response received: Access Denied'.
I'm sure it's down to not having the right permissions set up for the user, but I'm not sure what I'm missing. Any ideas?
i think thats a bug i would report it
what version of c5?
have you cleared out your site cache?
have you cleared out your site cache?
Version 5.3.2 - is hosted by getconcrete, so don't think I can try this on a more recent version.
I suspected the cache as well so I've cleared it (and even turned it off) but am getting the same behaviour.
I suspected the cache as well so I've cleared it (and even turned it off) but am getting the same behaviour.
Oh, if we're hosting it we can look into it and see what's off. Contact me via email with your site information, franz at concrete5.org
I am also getting this issue.
If I log in as a user who has read-only permissions to half of the website and edit permissions for the other half, I can't add a link to a "read-only" page.
This seems like a bug to me -- surely I should be able to link to a page that I have read-only access to.
What am I doing wrong?
If I log in as a user who has read-only permissions to half of the website and edit permissions for the other half, I can't add a link to a "read-only" page.
This seems like a bug to me -- surely I should be able to link to a page that I have read-only access to.
What am I doing wrong?
sounds like a different issue..
you're saying as an editor, you don't see links to pages you dont have access to in the sitemap when making a link in the content block?
you're saying as an editor, you don't see links to pages you dont have access to in the sitemap when making a link in the content block?
Yep, as an editor, when I try to add a link to another page, the site map doesn't appear after clicking on "insert link to page".
Instead, I get this error message:
Unable to load sitemap data. Response received: Access Denied.
Editors on the site shouldn't have permissions to modify the site map as such, but they need to be able to add links to other pages.
Please help! Thanks!
Instead, I get this error message:
Unable to load sitemap data. Response received: Access Denied.
Editors on the site shouldn't have permissions to modify the site map as such, but they need to be able to add links to other pages.
Please help! Thanks!
that is odd..
i thought you were saying that pages they didn't have access to didn't show up but others did, which made more sense.. hrm
i thought you were saying that pages they didn't have access to didn't show up but others did, which made more sense.. hrm
And not sure if this is related, but as an editor, when I try to edit an existing block on a page that I have permissions to edit, I get a an error message saying "Access Denied".
Could I perhaps email you login info to my site so you can see it in action?
Could I perhaps email you login info to my site so you can see it in action?
I know this thread is a bit old now, but I am now having this problem too.. or it seems to be this problem. I am, however, only getting the "Access denied" message when clicking on "Add link" in TinyMCE. I first found this error on an existing site, even after trying Andrew's fix. I then tried it on a fresh install and got the same error. Here's what I am doing to create the error:
1. Install C5 (no auto content)
2. Add advanced permissions model in site.php
3. Create "Editors" user group
4. Create new user, adding them to Editors
5. In Sitemap > Home (right click) > Set Permissions, add Editors group, giving access to all but delete and admin.
5. Still in Sitemap > Show System Pages (check) > Dashboard > Sitemap (right click) > Set Permisions > select manually > add Editors group > give read access to Editors group
6. Although there shouldn't be a cache yet (I haven't viewed any pages yet), I clear it anyway.
At this point, when I log in as my new editor user, I get the aforementioned error in TinyMCE (from content block).
Although you said, Andrew, that your solution is not ideal, it's a thousand times better than the only solution I can think of, which is to give the editors admin access.
Can anyone see a step I missed? Should I be reporting this as a bug?
1. Install C5 (no auto content)
2. Add advanced permissions model in site.php
3. Create "Editors" user group
4. Create new user, adding them to Editors
5. In Sitemap > Home (right click) > Set Permissions, add Editors group, giving access to all but delete and admin.
5. Still in Sitemap > Show System Pages (check) > Dashboard > Sitemap (right click) > Set Permisions > select manually > add Editors group > give read access to Editors group
6. Although there shouldn't be a cache yet (I haven't viewed any pages yet), I clear it anyway.
At this point, when I log in as my new editor user, I get the aforementioned error in TinyMCE (from content block).
Although you said, Andrew, that your solution is not ideal, it's a thousand times better than the only solution I can think of, which is to give the editors admin access.
Can anyone see a step I missed? Should I be reporting this as a bug?
This is not ideally, obviously, but I think the problem is that, for right now, for users and groups to access the sitemap in the text editor, they need to have read access to the sitemap page in the browser.
1. Login as admin
2. Go to /dashboard/sitemap.
3. Click "show system pages."
4. Highlight Dashboard > Sitemap, click, and select "Permissions."
5. Use the grid to give the editors group(s) read access to that page.
now they should have access to the sitemap (whatever pages they can read) from within TinyMCE. Obviously this isn't ideal, but permissions-wise the sitemap page in the dashboard shouldn't let you do anything that your permissions won't let you do in the site - this is just an extra layer for those who don't want that level of site architecture to be visible to their editors at all. In the future we will try to treat this more like the file manager, which has a separate "search" permission set controlling whether the search interface (in this case, the sitemap) is available from external locations within the concrete5 interface.
Whew! That was a mouthful.
1. Login as admin
2. Go to /dashboard/sitemap.
3. Click "show system pages."
4. Highlight Dashboard > Sitemap, click, and select "Permissions."
5. Use the grid to give the editors group(s) read access to that page.
now they should have access to the sitemap (whatever pages they can read) from within TinyMCE. Obviously this isn't ideal, but permissions-wise the sitemap page in the dashboard shouldn't let you do anything that your permissions won't let you do in the site - this is just an extra layer for those who don't want that level of site architecture to be visible to their editors at all. In the future we will try to treat this more like the file manager, which has a separate "search" permission set controlling whether the search interface (in this case, the sitemap) is available from external locations within the concrete5 interface.
Whew! That was a mouthful.
Thanks so much for your thoughtful reply, Andrew. I followed your instructions, but still get the same error message when the sitemap should appear.
"Unable to load sitemap data. Response received: Access Denied."
Any other ideas?
"Unable to load sitemap data. Response received: Access Denied."
Any other ideas?
are your site accessible from internet?
For example, why not set the basic authentication, etc.?
For example, why not set the basic authentication, etc.?
It's an Intranet, with some users having read-only access to certain sections, and edit access to other sections. The general public has no access.
did you clear the site cache?
sometimes when you make permission changes you have to clear the site cache for them to take effect...
dashboard > sitewide settings > debug
sometimes when you make permission changes you have to clear the site cache for them to take effect...
dashboard > sitewide settings > debug
Thanks Andrew - I've gone through the steps and this has fixed the problem for me.
I have given Editor Permissions in FOUR DIFFERENT PLACES!
1. Sitewide Settings > Access
2. Sitewide Settings > Other Permissions (gave all the same as Admin)
3. Sitemap > System Pages > Sitemap & File Manager (all of these pages, including children)
4. Sitemap > Access - added Editor group and checked "Acess Sitemap and Page Search"
I can NOT add a Page Link through the TinyMCE editor.
I CAN add a page link through JordanLev's Designer Content block.
WHY?!
1. Sitewide Settings > Access
2. Sitewide Settings > Other Permissions (gave all the same as Admin)
3. Sitemap > System Pages > Sitemap & File Manager (all of these pages, including children)
4. Sitemap > Access - added Editor group and checked "Acess Sitemap and Page Search"
I can NOT add a Page Link through the TinyMCE editor.
I CAN add a page link through JordanLev's Designer Content block.
WHY?!