staff1 can't add a forum topic

[Paul Everitt]

I logged in as staff1 and went here:

  http://localhost:6543/offices/baltimore/forums/baltimore-news/add_forum_topic.html

...and got forbidden. I'm not sure why. Here is the ZCML for that view:

  <view
    for="karl.content.interfaces.IForum"
    view=".forum.add_forum_topic_view"
    name="add_forum_topic.html"
    permission="create"
  />

We need the security workflow to allow staff to add forum topics and comments inside an intranet. Other content is closely controlled inside an intranet.

[Shane Hathaway (shane-hathawaymix)]

Did this work before? It's happening because all intranet security is inherited from /offices, where members of group.KarlStaff only have the 'view' and 'comment' permissions.

Now I guess group.KarlStaff should have the 'edit', 'create', 'delete', and 'moderate' permissions, but where? For all forums?

[Paul Everitt (paul-agendaless)]

I believe it was working before, yes.

As a note, staff can create content, but like a blog in a community,
should not be able to edit each other's content. Only admin and
creator can edit.

--Paul

On Apr 23, 2009, at 8:03 PM, Shane Hathaway wrote:

> Did this work before? It's happening because all intranet security is
> inherited from /offices, where members of group.KarlStaff only have
> the
> 'view' and 'comment' permissions.
>
> Now I guess group.KarlStaff should have the 'edit', 'create',
> 'delete',
> and 'moderate' permissions, but where? For all forums?
>
> ** Changed in: karl3
> Status: New => In Progress
>
> --
> staff1 can't add a forum topic
> https://bugs.launchpad.net/bugs/364785
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in Porting KARL to a new architecture: In Progress
>
> Bug description:
> I logged in as staff1 and went here:
>
> http://localhost:6543/offices/baltimore/forums/baltimore-news/add_forum_topic.html
>
> ...and got forbidden. I'm not sure why. Here is the ZCML for that
> view:
>
> <view
> for="karl.content.interfaces.IForum"
> view=".forum.add_forum_topic_view"
> name="add_forum_topic.html"
> permission="create"
> />
>
> We need the security workflow to allow staff to add forum topics and
> comments inside an intranet. Other content is closely controlled
> inside an intranet.

[Shane Hathaway (shane-hathawaymix)]

Fixed in revision 2435. You'll have to create a new site to see the changes.