CP Search results include unauthorized results

  • 3by400inc
  • Topic Author
  • Offline
  • New Member
  • New Member
More
10 years 10 months ago - 10 years 10 months ago #1643 by 3by400inc
We are interested in purchasing Custom Properties 2.0 for a J2.5 site but I've found a bug in the CP Search module/results page on your demo.

I was testing your demo and noticed that if I set an article's access to "special", for instance, I can then return to the frontend as a public user and perform a search using the CP search module and the article with the "special" access level shows in the results.

See here - www.solidsystem.it/demo1720/en/food/8-appetizers.html

I've set the "Antipasto di carciofi" article to "special" access level and when I first view the Appetizer category as a public user at the link above I do not see "Antipasto di carciofi" listed. But, if I then use the CP Search module and filter for "not spicy" and search I see the "Antipasto di carciofi" article in the results.

Is there a solution for this because respecting access levels is a big concern for our project?

Update:
This occurs on CP 2 and CP 3.
Last edit: 10 years 10 months ago by 3by400inc. Reason: update

Please Log in or Create an account to join the conversation.

  • 3by400inc
  • Topic Author
  • Offline
  • New Member
  • New Member
More
10 years 10 months ago #1644 by 3by400inc
Replied by 3by400inc on topic CP Search results include unauthorized results
I see that this is actually a feature now! I wasn't able to access the CP 3 demo component config, but I was able to access the CP 2 component config ... so I see that there is an option to search within only authorized content or search all content. Purchasing CP now ...

Please Log in or Create an account to join the conversation.

  • 3by400inc
  • Topic Author
  • Offline
  • New Member
  • New Member
More
10 years 9 months ago #1700 by 3by400inc
Replied by 3by400inc on topic CP Search results include unauthorized results
I have installed Custom Properties on Joomla 2.5.18. I have "Search unauthorized articles:" set to "No" but when I test this it doesn't work.

I'm using a test user account that doesn't have access to some content categories. But if I click on a tag in an article the user does have access to, I'm shown all articles, including unauthorized ones, that have that tag.

Please Log in or Create an account to join the conversation.

More
10 years 9 months ago #1701 by andrea_4g
Replied by andrea_4g on topic CP Search results include unauthorized results
Custom Properties checks article permissions. Category permissions are not taken into consideration at this time.

Please Log in or Create an account to join the conversation.

  • 3by400inc
  • Topic Author
  • Offline
  • New Member
  • New Member
More
10 years 9 months ago #1702 by 3by400inc
Replied by 3by400inc on topic CP Search results include unauthorized results
Its not the category links I'm having the issue with. The articles that are returned are articles the user does not have access to. If the user tries to click on one of the article results returned they get the "you are not authorized message".

Please Log in or Create an account to join the conversation.

More
10 years 9 months ago #1703 by andrea_4g
Replied by andrea_4g on topic CP Search results include unauthorized results
To clarify: Custom Properties does not check the permissions of the category an article belongs to. It checks only the article own permissions.
E.g.: if the article is Public, Custom Properties shows it within the result list.

Please Log in or Create an account to join the conversation.

Time to create page: 0.181 seconds