Forum GLPI-Project

tabad

Member

From: Manzanares, Ciudad Real, Spain

Registered: 2011-09-23

Posts: 89

[Plugin][File injection 2.3.1] It's shown with permission 'No access'.

Hello,

The environment

* GLPI 0.84.7
   * File Injection 2.3.1

The bug

A user with a profile like this

* Home
   * Administration
      * Profiles
         * <anyprofile>
            * File injection (tab)
               * Model management 'No access'

is able to view 'Home > Plugins > File injection' menu. This menu shouldn't be shown with 'No access' over 'Model management', it is confusing.

Regards,

---

Tomás Abad

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: [Plugin][File injection 2.3.1] It's shown with permission 'No access'.

This right is only to create new models of import.
With no access, you can use created models but not create new one.

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

tabad

Member

From: Manzanares, Ciudad Real, Spain

Registered: 2011-09-23

Posts: 89

Re: [Plugin][File injection 2.3.1] It's shown with permission 'No access'.

Hello Nelly,

Understood. Then the bug is other, a switch is missing into File Injection profile, like this

* Home
   * Administration
      * Profiles
         * <anyprofile>
            * File injection (tab)
               * Inject files                 <---(new)
               * Model management

The Inject files switch should be Yes or No.

This new switch or flag is needed because not all users have to be able to inject files. With this new switch you have all possibilities, a) no access to File Injection plugin, b) access to File Injection plugin to inject files and c) access to File Injection plugin to manage models.

Regards,

---

Tomás Abad