Can Admin Only Fields actually be Admin Only?

27 posts by 5 authors in: Forums > CMS Builder
Last Post: February 23, 2011   (RSS)

By gadefgaertgqe - February 17, 2011

Hello :)

I have found a new issue with the above solution:

When someone without admin access saves a section with hidden fields meant only for the admin, any data in the hidden field is removed. I guess it is being overwritten as if the field was cleared by the user.

It's as if the content is being hidden, but when the user saves the section they still have full write access to all the fields.

This functionality is critical for me and the issue is crippling the website.

Any ideas?

Many thanks

Paul

Re: [Pixels & Beats] New Additional Error occuring with above solution

By zip222 - February 17, 2011

This is scary. I just had the exact same issue and came to the forums looking for this thread, and there it was right at the top.

Re: [zip222] New Additional Error occuring with above solution

By gadefgaertgqe - February 17, 2011

lol!! Well at least I know it's not me being a bit stupid. But that is weird....

Re: [Pixels & Beats] New Additional Error occuring with above solution

By gadefgaertgqe - February 17, 2011

For the record I have not recently upgraded and my version number is 2.06 [:)]

Re: [Pixels & Beats] New Additional Error occuring with above solution

By Jason - February 17, 2011

Hi,

I just want to make sure I understand what's happening. An administrative user creates a record and fills out all fields. A non administrative user then edits the record and saves it. When the administrative user goes back to the record, any field that's set to "admin" only no longer has a value. Is that correct?

Let me know.
---------------------------------------------------
Jason Sauchuk - Project Manager
interactivetools.com

Hire me! Save time by getting our experts to help with your project.
http://www.interactivetools.com/consulting/

Re: [Jason] New Additional Error occuring with above solution

By gadefgaertgqe - February 17, 2011

Hi Jason.

Yes that is exactly it :)

Re: [Pixels & Beats] New Additional Error occuring with above solution

By Jason - February 17, 2011

Hi,

What I think is happening is that due to the workaround change that was made in the edit library, those admin only fields are being skipped completely. They're not being outputted as hidden fields. Getting a customization like this to work correctly in all instances is going to be more complex than can be handled properly in support. We can look to creating a custom plugin solution to accomplish this. If you're interested in this, please email consulting@interactivetools.com

Hope this helps
---------------------------------------------------
Jason Sauchuk - Project Manager
interactivetools.com

Hire me! Save time by getting our experts to help with your project.
http://www.interactivetools.com/consulting/

Re: [Jason] New Additional Error occuring with above solution

By gadefgaertgqe - February 18, 2011

This is bad news. I have based key functionality / section structure around this 'fix'.

I still can't work out why the boundaries between admin and editor were blurred in this way, or a variation of editor ("sub-editor"?) was not created to address the problem.

I am not adverse to authorising payment for custom plug-in work. I have payed before, and even as I type this I have $400 of custom programming being done at the moment. However I do feel that this should be part of the logical basic structure and not something that should be pushing CMSB beyond it's limits.

I'm going to leave it at this point for the moment as I am feeling frustrated and hopefully made my feelings felt in the nicest possible way [:/]

Re: [Pixels & Beats] New Additional Error occuring with above solution

By Jason - February 18, 2011

Hi,

Another option would be to put CMS Builder's code back to it's original state and then use a free plugin that Chris created:
http://www.interactivetools.com/add-ons/detail.php?Show-Hide-Fields-For-Users-1036

Here's the Forum Thread concerning this plugin:
http://www.interactivetools.com/forum/gforum.cgi?post=85139#85139

Hope this helps sort this issue out.
---------------------------------------------------
Jason Sauchuk - Project Manager
interactivetools.com

Hire me! Save time by getting our experts to help with your project.
http://www.interactivetools.com/consulting/

Re: [Jason] New Additional Error occuring with above solution

By pgplast - February 19, 2011

Not sure this is the same issue previously discussed, but it may be related.

I found that setting the accessList field of the accounts editor to admin only, and altering the edit_functions.php and save.php files led to strange behavior. When I look closely, I noticed that setting that field to Admin only changed the field type from "accessList" to "none."

I downloaded the accounts.ini schema and found that indeed it read:

[accessList]
order = 20
label = "Section Access"
type = "none"
isSystemField = 1
adminOnly = 1

When I changed this to [accessList]
order = 20
label = "Section Access"
type = "accessList"
isSystemField = 1
adminOnly = 1

and re-uploaded, the expected behavior of the script mods then followed.