[geeklog-users] Problem editing own stories

[Vincent Furia]

The thinking behind this is that you should not be able to edit an
article (even if you originally wrote it and/or are the current owner)
unless you have edit permissions for the topic as well.  This allows a
site Admin to restrict certain types of access to a given topic. 
Granted, this is not the simplest thing to understand and it perhaps
should be rethought.  However, since its been this way for several
major releases now I don't think it will be changed unless there is an
over riding reason to do so.

This is not a security hole because you need read/edit for *both* the
article you want to edit and the topic that it is in.  Again, it just
allows the Geeklog admin a much finer level of control.

The best way to learn about Geeklog permissions (especially in these
sorts of weird circumstances) is to try things out and see how things
react.

-Vinny


----- Original Message -----
From: Philip Peake <philip at vogon.net>
Date: Sun, 18 Jul 2004 17:20:22 -0700
Subject: Re: [geeklog-users] Problem editing own stories
To: geeklog-users at lists.geeklog.net

That does in fact fix things - but as I said in my previous post, why
is this needed when the owner (me) has R/E

permissions? This seems like a potential security issue, doens't this
give write permission to anyone via the group

permissions?

Philip