https://github.com/scottbedard/oc-badpermissions-plugin

Just demonstrating a permission issue.
https://github.com/scottbedard/oc-badpermissions-plugin

Last synced: 18 days ago
JSON representation

Just demonstrating a permission issue.

• Host: GitHub
• URL: https://github.com/scottbedard/oc-badpermissions-plugin
• Owner: scottbedard
• Created: 2015-05-30T15:57:43.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2015-05-30T15:58:36.000Z (over 9 years ago)
• Last Synced: 2024-12-08T18:49:41.470Z (25 days ago)
• Language: HTML
• Size: 102 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Bad Permissions

This plugin demonstrates how a ceratin permissions setups can accidentally block access to the entire backend.

https://github.com/octobercms/october/issues/1180

It appears that the backend is selecting the blocked page as the default, and therefor making the rest of the backend inaccessible. Even if I try to navigate to a different controller manually via typing "/categories" into the URL, I am immediately redirected back to the page I don't have access to.

#### Setup

1. Install the plugin

2. Create an administrator who has blocked access to "Posts", but does have access to "Categories".

3. Log in with the new administrator