Access Element not respecting ACL

[ontarget]

Hi I have a list with documents available for download.
some docs should be accessible to certain users others not.
I setup an access element and saved a record with super user access.
However when i log in as a registered user i can still see the record and download the doc.
Is there some setting I'm missing?
Also what is the chain of command for access control
Menu (Registered)
List (Registered)
Row controlled by access element (Registered or Super User)

F3.8.1 and j3.8.11

Here is a screen shot i'm logged in as registered yet i see a doc available for super user only

 

[cheesegrits]

The 'access' element doesn't automatically apply access controls. It just renders a dropdown of J! access levels in the form.

To pre-filter a list by it for the logged on user, add a prefilter ....

WHERE
Field: your_access_element
Condition: IN
Value: {$my->levels}
Type: query
Apply to: Public

One of these days I might add some companion list plugins for both the 'access' and 'usergroup' elements, to automagically apply ACL's. Or I might even add an access level based setting to the main list ACL's, as we currently do for users with the "or use element" that matches logged on ID against a user ID in a specified element.

But for now ... roll your own prefilter.

-- hugh

 

[cheesegrits]

I updated the wiki for the access element with my response / example from the previous post.

-- hugh

 

[ontarget]

Hi Hugh,
Thanks for the feedback i'm just getting around to testing this.
I setup my prefilter in the menu with your settings but I am getting a 500 error :
"Fabrik has generated an incorrect query for the list Documents and Forms"

I checked the prefilters wiki http://fabrikar.com/forums/index.php?wiki/list-pre-filters/ and found this little gold nugget
Assigning access based on the view level element plug-in. (top)

This is only possible in Fabrik 3.1 (since 07/04/2013)

where:
field = a view level element
condition: IN
value: {authorisedViewLevels}
type = no quotes

Happily this works!

 

[cheesegrits]

How old is your Fabrik?

I added that {$my->levels} relatively recently, like (I think) this year some time.

-- hugh

 

[ontarget]

Hi Hugh I'm running F3.8.1 and j3.8.11

 

[cheesegrits]

Yeah, I may have added it since 3.8.1.

-- hugh