3.81 User Accounts

6 posts by 3 authors in: Forums > CMS Builder
Last Post: December 29 (RSS)

I just noticed an issue with user permissions on a few 3.81 installs that I have tested specifically for this problem.

If I set a user to Viewer, they can't see any records.
If I set them to Viewer & Author, they can't see any other records, but can create them.
If I set them to Editor or Author, everything works as expected.

Thanks,

Kenny H

Hi Kenny,

Can you check whether "view" access is checked under the database editor for that section? If not, does that resolve it?

Let me know if this worked differently in the past, and we can revert it. Currently, it needs view access on the User Account and the section.

We're working to make it simpler, but let us know if you have any feedback. Thanks!

Dave Edis - Senior Developer
interactivetools.com

By KennyH - December 23

Hi Dave -

That did resolve the issue. I'm not sure how it was before as I rarely check things from this point of view. Most of my websites are locked out from the clients and my CMSB account is the only active account. In the cases where the clients have access, it is very limited (so they don't hurt themselves).

This only came up because I have employees that need access to some of the data in my Development Dashboard, but there is some info I don't want them to see like revenue, API keys, server passwords, etc... HOWEVER, I implemented front-end forms where they can edit limited data and never see the backend of the CMS.

I don't think it's an issue for me. Maybe a note somewhere that "View" must be turned on for a section before you can give someone "View" access. I just realized that I turned off "View" access since they would be able to see sensitive data regardless of being able to edit it. I don't have a case where this affects other websites, so it's all good working the way you have it.

Thanks,

Kenny H

By kitsguru - December 23

I have used access control quite a bit, when set to view or author, you have quite a bit of fine grained control over what they can view/edit. authorbcan only edit records they created.

Jeff Shields
yaadev.com

By Dave - December 29

Hi All,

This will be updated in the next beta so users with "View" access to all sections will see all sections on the menu and have list access. Then, if "View" access is enabled for a menu, they'll be able to click in to view more details on a specific record.

Thanks for your feedback on this. We're always looking to make it more straightforward and clear.

Dave Edis - Senior Developer
interactivetools.com

By KennyH - December 29

Can confirm this works very well in 3.82 Beta. This is a much cleaner solution

Thanks,

Kenny H