Page 2 of 3
Re: Bug?
Posted: 09 Mar 2011, 11:37
by sutivnn
TeeBee wrote:Hi momentis
You cannot restrict access by user group. Currently you have 3 options which can been seen in your screenshot:
1. Access: Restrict access by Access Level
2. Access Rights: Restrict access by user
3. Upload Rights: Restrict upload by user
What confuses ME is that the upload restriction is not working as I would expect. I created a category "Test" and chose upload rights "- Nobody -".
http://www.noithat-fami.net http://www.noithat190.net.vn http://www.noithat-fami.net http://www.noithat190.net.vn After that I logged into the backend with an administrator (no super user). I could create a file and put it into the category "Test".

Is this a bug?
Thomas
Yes! Bug ...

Re: Will J1.6 version use ACL
Posted: 09 Mar 2011, 12:30
by der-holgi
As Jan already wrote Access, Access rights and Upload rights are for the front end only. What is really missing, is the permission control (permissions for create, delete, edit, edit state, edit own) for the back end. Jan, when will this feature be added?
Great work, Jan
Holgi
Re: Will J1.6 version use ACL
Posted: 11 Mar 2011, 13:41
by Jan
Hi, it should work, the code checks for the permissions?
I will do some tests there, see e.g.
Code: Select all
if ($canDo->get('core.edit')) {
JToolBarHelper::editList('phocadownloadcat.edit','JTOOLBAR_EDIT');
}
Re: Will J1.6 version use ACL
Posted: 13 Mar 2011, 19:23
by der-holgi
How can I set the permissions for a download category in the back end then? When I edit an article for example I can change the permissions at the bottom of the article page. But if I edit a download category I don't see anything like this. Where do I configure permissions in the backend?
Thanks
Holgi
Re: Will J1.6 version use ACL
Posted: 15 Mar 2011, 02:11
by Jan
Hi,
Components - Phoca Download - Control Panel - Options - in options go to "Permissions" folder. There you can set permissions for different groups.
If you set "denied" e.g. for administrator, then administrator will be not able to create category of file, etc.
Jan
Re: Will J1.6 version use ACL
Posted: 15 Mar 2011, 20:15
by der-holgi
Hi Jan
oh sorry, I know that you can set general permissions for create, edit, etc. What I meant are permissions for (single) download categories. I would like to configure phoca download that way that there are "administrators" for different categories. Each admin should only be able to edit those categories he has permissions for. With normal (article) categories this is possible. There you can to set permissions below each category when you edit it. Will this feature be added in phoca download, too?
Holgi
Re: Will J1.6 version use ACL
Posted: 16 Mar 2011, 20:31
by Jan
Re: Will J1.6 version use ACL
Posted: 12 Apr 2011, 16:51
by momentis
Thanks Holgi, that is EXACTLY what I was referring to in my original post. Joomla 1.6 gives us the ability to define custom user groups. I am not a developer, but I cannot see how giving us the ability to restrict access to a PD category could substantially increase server load. That's what Joomla itself is doing with the core ACL in the core extensions.
While going to the granular level of assigning rights to a specific user may be beneficial to some, a and more flexible approach would seem to be (particularly when dealing with J1.6) to assign access to Joomla user groups. Leave Access levels to the menu items, but give us the ability to assign category access to Joomla user groups. Just let PD follow the path laid out by J1.6 ACL.
Re: Will J1.6 version use ACL
Posted: 18 Apr 2011, 15:47
by Jan
Hi, as I wrote many time, first the Phoca Download must be finished to be stable, then I can work on new features and make all possible tests with all possible combination of the rights and find some solution which will be not confused and not memory demanding.
Jan
Re: Will J1.6 version use ACL
Posted: 30 Sep 2011, 17:12
by momentis
Jan,
Any idea when (or if) we can expect to see PD implement front-end Upload restrictions based on Joomla user group? I love the component, but having to choose actual users to restrict upload rights is counterproductive.
Thanks!
Rick