6 years ago
10
Topic

Hi

We know that if you have a content type that has a FILE TRANSFER field in the admin view, you have to ADD the file in the content view to be able to download it from the admin view.

But in backend, even if you do so, if you are only a manager, you can't download the file but get an error message:

Error

You are not authorised to view this resource.

Even if you turn ALL the permissions to YES for this content type and the manager group.

To be sire we are talking about the same thing, I'm talking here about the link:

administrator/index.php?option=com_cck&task=download&file=<file_field_name>&id=<content_id>

Is that a known issue please ?

Thanks

Cyril

Get a VIP membership
4229 Posts
Kadministrator
6 years ago
5
Level 1

Download depeds on the view permissions, due to the bizzare Joomla permissions implementation this means you have to add this group to the viewlevel you have set on the field.

6 years ago
4
Level 2

Hi Klas

but on the content view I have set the ACL to public on the file field. Even so the managers can't access the files

thanks

cyril

4229 Posts
Kadministrator
6 years ago
3
Level 3

Check if managers group is assigned to Public viewlevel. Might seem stupid, but with bizarre viewlevels system there is no inheritance so to be allowed group must be explicitly assigned to the viewlevel set on the field.

After this is finally merged using workaround with field in content view should not be needed anymore https://github.com/Octopoos/SEBLOD/pull/470/files

6 years ago
2
Level 4

Excuse me Klas but I don't understand "Check if managers group is assigned to Public viewlevel" 

On the joomla general configuration settings as well as on the content type itself the manager group has ALL the accesses for the test (everything green) and still can't download the files in backen. 

Are we sure we are talking about the same thing please ?


thanks


cyril

4229 Posts
Kadministrator
6 years ago
1
Level 5

You are talking about access, I'm talking about viewlevels, this are 2 different things - (insert bad word here) Joomla has separate permission system for view https://magazine.joomla.org/issues/issue-feb-2012/item/639-Joomla-ACL-Access-Levels

6 years ago
0
Level 6

Hi Klas

sorry I never use the viewlever term but only ACL 

On the content view, on the file field the access is PUBLIC and in the ACL manager the public ACL is assigned to the root group (public) AND NOW to the manager group as well.

I must add this is a multi site project so actually the manager group is site1-manager

even if I explicitly set the PUBLIC ACL to the site1-manager group, a site1-manager can't download the file

thanks


cyril

4229 Posts
Kadministrator
6 years ago
1
Level 1

I just tried with normal manager and it works fine even without explicilty adding the group, must be something with multisites

6 years ago
0
Level 2

Yes Klas

I also tried on other simple sites and multisites and in both cases a manager (or a site manager) could download the file in the backend.

SO it is related to the project but where to look at ???

  • the ACL on the file transfer field (in the site and content views) are set to public
  • the user belongs to the site1-manager group
  • the public ACL is explicitely (even it should not be necessary) assigned to public and site1-manager group
  • the category of the content is public.

However when loged as this site1-manager in back end, when entering the content and trying to download the file  I still get the message :

Error

You are not authorised to view this resource.

Only super users (not even simple admins) can download the files from the back end

Cyril

6 years ago
1
Level 1

Hi Klas

can you help me here please ?

thanks

cyril

4229 Posts
Kadministrator
6 years ago
0
Level 2

As this is specific to your site it would require a support hour.

Get a Book for SEBLOD