EasySocial apps do not respect ACL in stream
By Jordan Weinstein on Sunday, 27 July 2014
Posted in General Issues
Likes 0
Views 666
Votes 0
Hello,

The EasySocial K2 app (possibly Joomla article, EasyBlog, EasyDiscuss too - untested) have an important problem. They stream content as well as item titles to the EasySocial stream, which is a nice, but if the items themselves are not public, the content is still displayed in the stream. This is true for sure for the K2 App. I worked with Nick to hack the K2 app so that at least we can hide the content as an option in the app config:

http://stackideas.com/forums/k2-app

So either I feel it should be a universal option to toggle content appearance in the stream off, or better yet to show titles only if the user has incorrect ACL permissions but show title AND content to those who have correct permissions. Note, the current option to limit display of content to a certain number of characters does not work if you select 'Limited' and use '0' for the value.

Jordan
Thanks for the heads up on this Jordan, I'll add a ticket for this internally.
Mark
·
Sunday, 27 July 2014 23:21
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Jordan,

I have applied some quick fixes internally so that the items respect the K2 item and category view permissions. Download this file and upload it into /media/com_easysocial/apps/user/k2/
Mark
·
Sunday, 27 July 2014 23:38
·
0 Likes
·
0 Votes
·
0 Comments
·
Hmmm,

I did as you suggested. It didn't change anything. That file did not already exist in that location; it seems to be the K2 item.php file, is that correct? I uploaded to /media/com_easysocial/apps/user/k2/ and nothing changed.

Jordan
Jordan Weinstein
·
Monday, 28 July 2014 00:48
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark,

Did you mean to upload k2.php?

Jordan
Jordan Weinstein
·
Monday, 28 July 2014 04:05
·
0 Likes
·
0 Votes
·
0 Comments
·
Ah sorry, I sent the wrong file Try this file instead. I have tested this internally and it works fine
Mark
·
Monday, 28 July 2014 16:25
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks Mark,

It seems now that the stream item is completely hidden (title and content) from those without proper ACL. It would be great if (possibly as an option in the app) if the titles appear to all but only the content appears to those with proper ACL. This would force those without proper ACL to register for the site and login.

Another, perhaps simpler option, would be to allow us to hide content of the post entirely (but keep titles) to prompt login. The app currently only allows to show all content or limited to 'x' number of characters. And that limit cannot be zero.

Jordan
Jordan Weinstein
·
Tuesday, 29 July 2014 20:25
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Jordan,

I don't think it really makes sense to display the stream if it's origins are not available to the user. The reason is because the linking would be completely messed up I do understand however that it could serve as some sort of a "teaser" and it's pretty cool if there's some subscriptions added on the stream like, "View these contents by becoming a member"
Mark
·
Tuesday, 29 July 2014 21:07
·
0 Likes
·
0 Votes
·
0 Comments
·
Yes, it would be very useful.

In terms of the logic of it, it would be identical the the default Joomla behavior for articles where one selects "show unauthorized links". This shows titles and even introtext to the public and prompts a login if selecting to readmore.

Jordan
Jordan Weinstein
·
Tuesday, 29 July 2014 21:12
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for the input on this, we'll see what we can do for this in the future
Mark
·
Tuesday, 29 July 2014 21:25
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Mark,

The file for K2 app, is it version free? Does it apply to any version of ES?

Thanks!
LAC Webadmin
·
Wednesday, 30 July 2014 02:07
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Jackson,

Yes, all apps released by us are 100% free You can find them at http://stackideas.com/apps
Mark
·
Wednesday, 30 July 2014 03:36
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post