U4-10779 - Unauthorized Error on Members Tree if Member Type Tree moved

Created by John Churchley 20 Dec 2017, 15:58:30 Updated by Sebastiaan Janssen 12 Jul 2018, 11:09:05

Tags: PR

Unauthorized Error on Members Section if Member Types is moved to Section which User doesn't have permissions

Scenario I have editors who have access to Members tree but I don't want them to be able to update Member Type properties. Therefore I move the Member Type tree into either Developer/Settings section. However if the user group doesn't have permission to those section this throws an unauthorized error as the MemberTypes.GetAllTypes is called by the Members tree.

Suggestion Authorize Users who have access to Members tree to be able to call the MemberTypes.GetAllTypes Api.

Comments

John Churchley 20 Dec 2017, 16:10:49

https://github.com/umbraco/Umbraco-CMS/pull/2357


Priority: Normal

Type: Bug

State: Fixed

Assignee:

Difficulty:

Category:

Backwards Compatible: True

Fix Submitted: Pull request

Affected versions: 7.7.7

Due in version: 7.12.0

Sprint:

Story Points:

Cycle: