Skip to content

Admin permissions have (almost) no effect #1052

Description

@TheMightyZeus

Enabling every permission available for users other than the built-in administrator doesn't allow those users to see the administration link, so they have no way of accessing navigation, users, groups, etc. I can manually navigate to /a/ and seem to be able to manage the things I have permissions for, but "An unexpected error occured." pops up, and not everything works. (For example, the badges showing number of users, roles, pages, all show 0). In fact users who aren't even signed in can access /a/ manually, though not really see anything, but that's a separate issue.

Steps to reproduce the behavior:
Create a group, give it some or all of the Users or Administration permissions. Sign in using an account other than the admin which is assigned to that group. Click on the profile button in the top corner, where the admin can access the administration link. There will be no such link, so the user can't manage users, groups, theme, navigation, etc.

Expected behavior:
Users should be able to navigate to the administration area if they have permissions that can only be used there.

Administration link (visible for admin, doesn't appear for anyone else)
image

  • OS: Ubuntu Linux (bionic) 18.04 x64
  • Wiki.js version: 2.0.0-beta.303
  • Database engine: PostgreSQL 10.10

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions