restrict author

lindabb · 2023-03-14 23:08:50

Hello,
Is there a way to restrict author to view and change by owned articles only.
Now, any author can change, delete any article , what I need to do allow only the owner to change, or delete their articles.
also restrict or hide or disable sort and display div

Thank you

bici · 2023-03-15 00:24:55

lindabb wrote #335072:

Hello,
Is there a way to restrict author to view and change by owned articles only.
Now, any author can change, delete any article , what I need to do allow only the owner to change, or delete their articles.
also restrict or hide or disable sort and display div

Thank you

Bot_Privs might meet your requirements

phiw13 · 2023-03-15 00:25:05

Have you checked this article on “User roles and privileges” in the documentation?

You certainly can restrict authors to a limited set of actions.

lindabb · 2023-03-15 14:01:24

Thank you all

Bloke · 2023-03-15 15:00:16

smd_user_manager might help as you can create new roles and customise the privileges accordingly.

lindabb · 2023-03-15 16:54:02

Thank you Bloke,
smd_user_manager worked, (Bot_Privs got mysql error). I wish the plugin had , show only owned articles, files, images so on,
no need to show other articles if no access, in this case , other authors can have private articles or files .
just an idea.

Thank you

bici · 2023-03-15 17:15:24

lindabb wrote #335087:

(Bot_Privs got mysql error).

Note works for me in this envirnoment

PHP version: 7.4.30
MySQL: 5.5.5-10.3.38-MariaDB (MariaDB Server)

edit to add :

User can edit articles						
User can edit only published articles						
User can edit only his articles						
User can edit only his published articles						
User can publish new articles												
User can delete only his articles

Last edited by bici (2023-03-15 17:19:25)

lindabb · 2023-03-15 17:35:40

Thank you bici ,
I’m using dev 4.8.9 version with php 8.1 , that plugin didn’t work, but Bloke’s suggestion worked for me,

I looked at Bot_Privs , looks minor change or comment out mysql version will work, but I didn’t want to change it.

Thanks again

Bloke · 2023-03-15 20:03:25

lindabb wrote #335087:

I wish the plugin had , show only owned articles, files, images so on,

That’s not a priv we have available, but it’s trivial to write a plugin to do it :)

(see the 2nd example plugin in that post)

lindabb · 2023-03-15 20:43:15

Thanks Stef ,

I have installed the plugin, and enabled it, do I need anything else to make it work ?
Now when I login as restricted user, still I see others’ articles

Thank you for your help

Bloke · 2023-03-15 21:39:10

Hmmm it should just work out of the box. All it does is add the relevant clause to the query. Let me test it and get back to you.

Bloke · 2023-03-15 22:19:39

Ah wait, you need to ensure it’s of Plugin Type 3 (admin). Otherwise it won’t run.

Try this compiled plugin instead:

# mrd_for_your_eyes_only v0.1.0
# Users can only view their own content
# Stef Dawson / Dale Chapman
# https://stefdawson.com/

# ......................................................................
# This is a plugin for Textpattern - http://textpattern.com/
# To install: textpattern > admin > plugins
# Paste the following text into the 'Install plugin' box:
# ......................................................................
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As noted in that thread I linked to, it might be a good idea if Publishers were exempt from the restriction so they can see all content. That would require a couple more lines of code.

lindabb · 2023-03-15 22:41:12

Thank you so much, you guys the best.
I appreciate your help, it worked exactly as I wanted.
however , there is one thing kind of security issue, I understand even user doesn’t have permission to update, but the idea to hide others’ articles from viewed by others.

if I have
http://localhost/textpattern/textpattern/index.php?event=article&step=edit&ID=10&_txp_token=abdccd9fb542dc52a187720f9fc1c6b3

now change the id to 1 or 2, or 3 (or any existing id) author still can view the article by id.

http://localhost/textpattern/textpattern/index.php?event=article&step=edit&ID=2&_txp_token=abdccd9fb542dc52a187720f9fc1c6b3

Maybe need some restriction on view too

Thank you for your kind support

Bloke · 2023-03-15 23:05:55

Yes, absolutely. The plugin’s only a cheap hack to show what’s possible (the help text mentions this).

It would need extending slightly to prohibit viewing from the Write panel too.

Bloke · 2023-03-15 23:43:43

This version should do it. Not tested particularly extensively so YMMV:

# mrd_for_your_eyes_only v0.1.0
# Users can only view their own content
# Stef Dawson / Dale Chapman
# https://stefdawson.com/

# ......................................................................
# This is a plugin for Textpattern - http://textpattern.com/
# To install: textpattern > admin > plugins
# Paste the following text into the 'Install plugin' box:
# ......................................................................
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Textpattern CMS

Textpattern CMS support forum

#1 2023-03-14 23:08:50

restrict author

#2 2023-03-15 00:24:55

Re: restrict author

lindabb wrote #335072:

#3 2023-03-15 00:25:05

Re: restrict author

#4 2023-03-15 14:01:24

Re: restrict author

#5 2023-03-15 15:00:16

Re: restrict author

#6 2023-03-15 16:54:02

Re: restrict author

#7 2023-03-15 17:15:24

Re: restrict author

lindabb wrote #335087:

#8 2023-03-15 17:35:40

Re: restrict author

#9 2023-03-15 20:03:25

Re: restrict author

lindabb wrote #335087:

#10 2023-03-15 20:43:15

Re: restrict author

#11 2023-03-15 21:39:10

Re: restrict author

#12 2023-03-15 22:19:39

Re: restrict author

#13 2023-03-15 22:41:12

Re: restrict author

#14 2023-03-15 23:05:55

Re: restrict author

#15 2023-03-15 23:43:43

Re: restrict author

Board footer