The permission "Use the Panels In-Place Editor with Page Manager" no longer has the expected effect. The description of the permission reads "Allows users with access to the In-Place editor to administer page manager pages. This permission is only needed for users without "use page manager" access." But as of the latest dev version, if a user's role has this permission but not the "Use Page Manager" permission, they are not able to customize or change layout with the IPE.

To reproduce:

  1. Install Drupal 7.50.
  2. Download and enable the latest dev versions of CTools, Panels and Panelizer, including Page Manager and the Panels IPE.
  3. Log in as an administrator.
  4. Assign all permissions to the administrator role.
  5. Create an editor role.
  6. Assign the following permissions to the editor role:
    • Use the Panels In-Place Editor
    • Change layouts with the Panels In-Place Editor
    • Bypass access checks when using Panels In-Place Editor
    • Use the Panels In-Place Editor with Page Manager
  7. Create a user with the editor role.
  8. Create a Page Manager page as a Panel variant with a path and a normal menu entry. Set the renderer to In-Place Editor.
  9. Save the Page Manager page.
  10. View the Page Manager page.
  11. While still logged in as an administrator, click the Customize this page IPE button.
  12. Add some content to the Page Manager page using the IPE and save it.
  13. Log out of the administrator account.
  14. Log in as the editor user.
  15. View the Page Manager page. Note you can see the IPE buttons at the bottom of the page.
  16. Click Customize this page.
  17. Note you see the JS alert "You are not authorized to access this page."
  18. Click OK to dismiss the alert.
  19. Note the IPE buttons do not reappear at the bottom of the page.
  20. Reload the page.
  21. Note the IPE buttons reappear.
  22. Click Change layout.
  23. Note you see the JS alert "You are not authorized to access this page."
  24. Click OK to dismiss the alert.
  25. Log out of the editor account.
  26. Log back in as an administrator.
  27. Assign the "Use Page Manager" permission to the editor role.
  28. Log out of the administrator account.
  29. Log back in as the editor.
  30. View the Page Manager page.
  31. Click the Customize this page button.
  32. Note you are now in the IPE interface.
  33. Add some content using the IPE and save it.
CommentFileSizeAuthor
#5 panels-pm-ipe-2787103-5.patch693 bytesdsnopek

Comments

cboyden created an issue. See original summary.

cboyden’s picture

cboyden commented
Related issues: +#2785915: Panels permissions update causes access denied on page manager pages defined in code

The code I tested this with includes the commit in #2785915: Panels permissions update causes access denied on page manager pages defined in code and also the latest CTools.

cboyden’s picture

cboyden commented
Issue summary: View changes
dsnopek’s picture

dsnopek
he/him
Primary language English
Location USA
commented
Parent issue: » #2786071: Plan for Panels 7.x-3.7 release

Targetting for Panels 7.x-3.7.

We may need to implement a hook_panels_ipe_access() on behalf of Page Manager or something like that

dsnopek’s picture

dsnopek
he/him
Primary language English
Location USA
commented
Status: Active » Needs review
StatusFileSize
new panels-pm-ipe-2787103-5.patch693 bytes

Gah, this wasn't from the new IPE access hook, it's from Panels storage. Here's a patch that fixes it for me.

cboyden’s picture

cboyden commented
Status: Needs review » Reviewed & tested by the community

This is working for me on a vanilla Panels/PM/IPE site and also on a Panopoly child distribution.

  • japerry committed ded7ea7 on 7.x-3.x authored by dsnopek 
    Issue #2787103 by dsnopek, cboyden, japerry: IPE with Page Manager...
japerry’s picture

japerry
Location KOMK
commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

adam3145’s picture

adam3145 commented

I am having exactly this issue, using panels 7.x-3.7, panels in place editor. I am running drupal 7.50.

Testing with the steps above, I am still encountering this issue.

I tried to apply the patch, but because it is already committed it would not work.

tfpkiii’s picture

tfpkiii commented

Like adam3145, I have the same issue with fully up-to-date (Drupal 7.50 Panels 7.x-3.7 - which contains the patch and other from previous threads) using Page Manager. What I am seeing is when using Page Manager to Add Content to a panel, I can reach the "Add content to Content" dialog box when creating a new Variant, but as soon as it is saved, attempting to add more items to any panel on the Page results in the "you are not authorized..." page. The new Variant approach seems to work only on Custom pages and not Existing or System pages. Any help would be appreciated - I had to regrade to Panels 3.5 to get this working for one project where time is critical.

cboyden’s picture

cboyden commented

@adam3145, I am unable to reproduce this issue using Drupal 7.51, Panels 3.7, and CTools 1.9 or 1.10.

@tfpkiii, it sounds like the problem you are having is in the Page Manager interface. This issue was about the IPE interface.

wranvaud’s picture

wranvaud commented

Possible duplicate https://www.drupal.org/node/2790499