Don't miss out Virtual Happy Hour this Friday (April 26).

Try our conversational search powered by Generative AI!

Manage access rights on content (visible to) is hidden

Found in

EPiServer.CMS.UI 11.2.0

Fixed in

EPiServer.CMS.UI 11.4.1

(Or a related package)

Created

Mar 02, 2018

Updated

Mar 26, 2018

Area

CMS UI

State

Closed, Fixed and tested


Description

1. Go to the CMS edit UI.
2. Edit any page where you have administer rights.
3. Select "Manage" for the "Visible to" field, to change access rights.
4. Make sure that the current user has only "Read" and "Administer".
5. Switch to another page and back to this page, to fully reload the context.

Expected: The "Manage" option should still be available, since I still have "Administer" access.
OR
When trying to change to this setting, you should get the same validation error as if you try to remove "Administer" completely for your/the last user.

Actual: The "Manage" option is hidden, so there is no way to change it back in-case an error was made by the user, short of navigating to admin mode.

Note: For catalog content, this is even a bigger issue. Since the only place to set access rights is in the editing/catalog UI, there is no way to do it in admin mode. If someone does this by mistake, the only way to recover it is to change directly in the database.