directus/v6-archive

Error while updating records with relations and group permissions

Open

#7 opened on Oct 25, 2018

View on GitHub
 (0 comments) (0 reactions) (0 assignees)JavaScript (4 forks)auto 404
3. MajorInterfacehelp wantedv6

Repository metrics

Stars
 (2 stars)
PR merge metrics
 (PR metrics pending)

Description

From directus created by nithinga : directus/directus#1658

Version Info

  • Directus version and branch: version/6.4 - c6fb4336732530c8db58b76124262e027e191175
  • PHP version: 7.1
  • MySQL version: 5.7
  • Web server: Apache
  • OS name and version: Docker ( Ubuntu )

Expected Behavior

When adding the record with relations, it should be added properly.

Actual Behavior

When adding the record with relations, it gives the given error in screenshot.

Steps to Reproduce

  1. Make 2 tables, eg: topics and books
  2. Make 2 groups, topic-manager and book-manager. Give permissions like book-manger can enter book details under a topic, but he cannot edit, delete or add topics.
  3. Login as book-manager and try to enter a new book detail. We will get the given screenshot error. This happends due to Directus trying to update all the relational tables, but donnot have permission. :( what is the need of trying to again update all relational tables ?

Logs or Screenshots

screenshot from 2017-07-05 14 48 22

Contributor guide

Research direction
Examine the permission checks for relational updates in Directus. Trace why the system attempts to update related tables even when the user lacks permission, and look for the specific conditional logic that should skip those updates.
Tech stack
phpmysql
Domain
backendapidatabase
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
PHPMySQL
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50