core icon indicating copy to clipboard operation
core copied to clipboard

No access to MetaModels for user groups but the admin

Open mpitz opened this issue 6 years ago • 4 comments

Checklist before I submit this issue report

I confirm that:

  • [x] I have tested this with the latest version available
  • [x] I have read documentation @ http://metamodels.readthedocs.org/en/ or http://metamodels.readthedocs.org/de/
  • [x] I have checked the Contao community forums for references https://community.contao.org/
  • [x] I have checked existing issues for duplicates and found none @ https://github.com/MetaModels/core/issues?q=is%3Aissue

My environment is:

Key Value Comments
PHP version: 7.3
Contao version: 4.4.41
MetaModels version: 2.1.4
Installed MetaModels packages: bundle_all
DC_General version: 2.1.3

Issue description

Under "User groups" > "Edit group" in the "Back end modules" section, it is not possible to select MetaModels under MetaModels. You can only select "Support MetaModels". So no user but the admin can access the MetaModels "Creation Panel".

Screenshots

image

mpitz avatar Aug 06 '19 12:08 mpitz

same at our test case :(

zonky2 avatar Aug 06 '19 12:08 zonky2

And this is by design. The creation panel is only to be used by admins as no regular user will should be able to manipulate the:

  1. Database
  2. Backend modules
  3. Permissions

discordier avatar Aug 07 '19 00:08 discordier

The creation panel is only to be used by admins as no regular user will should be able to manipulate the

We should discuss whether the restriction should remain that way or not. In Contao I think you can also unlock everything for a user group...

zonky2 avatar Aug 07 '19 06:08 zonky2

Not everything but yeah, we can discuss the pro and cons. It was visible to all in prior versions way back in time and restricting it to a certain group/user wasn't worth the hassle and we came to the conclusion that only admins will manipulate them anyway.

Would be interesting to know the usecase here. @mpitz could you elaborate why a non admin should be able to manipulate MetaModels?

discordier avatar Aug 13 '19 12:08 discordier