Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Alternate user template / parent page potentially viewable via /processwire/access/users/my-name/ #2011

Open
adrianbj opened this issue Dec 17, 2024 · 0 comments

Comments

@adrianbj
Copy link

Short description of the issue

If you are using the alternate user template/parent setup and a user that has a frontend viewable template gets moved to the processwire/access/users parent, then their page will be viewable at https://mysite.com/processwire/access/users/my-name/ even for guest users.

Expected behavior

Because this page is now effectively an admin page, it should not be viewable by guest users. They should get the login dialog instead.

Actual behavior

They see the page at that admin URL using the viewable template it's assigned to.

Steps to reproduce the issue

  1. Setup alt template/parent users
  2. Create viewable template for a user
  3. Move that user to processwire/access/users/ parent via the Parent select field on the user's Settings tab.
  4. View the page as a guest user.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant