Actions
Bug #6483
closed
Backend fieldClass response has incorrect access check
Description
Admins that can edit users, but are not super users, can not utilize any fieldClass ajax usages due to an incorrect access permissions check. This is likely in the legacy code for backend endpoints.
Error: You cannot edit a `guest`. Only higher-level users have this power.
https://www.joomlapolis.com/forum/255-developer-members-support/235938-strange-access-restriction
Updated by krileon about 7 years ago
tabClass in administrator/components/com_comprofiler/controller/controller.default.php is calling checkCBpermissions incorrectly. Needs same check as frontend.
Updated by krileon about 7 years ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Fixed in MR !1248
Updated by krileon over 6 years ago
- Target version changed from CB 2.2 to CB 2.1.3
Actions