Skip to content

[4.x]: /admin/actions/element-indexes/filter-hud?site=XXX&v=1739269085552 throws Exception if permission are not set #16678

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
hiasl opened this issue Feb 11, 2025 · 1 comment
Assignees

Comments

@hiasl
Copy link
Contributor

hiasl commented Feb 11, 2025

What happened?

Description

In the CP Entries Overviews and Modals for filtering entries use this action:
/admin/actions/element-indexes/filter-hud?site=XXX&v=1739269085552

This action throws an Exception, if the logged in user does not have any permission for the target section.

Steps to reproduce

  1. Have 2 sections, e.g. "pages" and "properties"
  2. Create an Entry field "propertySelect" and add this field to an Entrytype in the pages section. Limit the Entry field's section to "properties"
  3. Create a user with full permissions for "pages" and none for "properties", impersonate this user
  4. Create an entry in "pages", try to select a property in the field "propertySelect".
  5. The modal opens, now click "filter icon" in the right end of the search field
  6. It will load forever and an server exception is reported (see screenshot below):
Image

Expected behavior

Field pulldowns should be become visible to limit the search to certain fields

Actual behavior

Exception

Craft CMS version

4.13.9

PHP version

8.2.25

Operating system and version

Linux 4.18.0-553.36.1.el8_10.x86_64

Database type and version

PostgreSQL 12.18

Image driver and version

GD 8.2.25

Installed plugins and versions

Blitz 4.23.10
Control Panel CSS 2.6.0
Cookies 4.0.1
Enforce password 2.0.0
Glossary 2.0.1
Hyper 1.3.5
Imager X 4.5.0
Inventory 2.2.0
KeyChain 4.0.0
Matrix Colors 3.0.0
Minify 4.0.1
Neo 4.2.23
Publisher X 3.0.1
Redactor 3.1.0
Redactor Anchors 1.5.0
Relax 2.0.2
SAML Service Provider 4.3.1
Sprig 2.13.1
SuperSort 4.0.0
Super Table 3.0.15

@brandonkelly
Copy link
Member

Thanks for reporting that! Craft 4.14.5 and 5.6.6 are out with a fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants