I have a combo box filter on a front end collection page. That filter uses a Foreign Key field. The Foreign Key table includes an Access Control field.
PROBLEM: The combo box filter contains items that should be hidden based on the user's assigned group.
Example: The user is a member of Group A and C. There are Items that are assigned (Joomla ACL) to members of Group B. When the user visits the collection page, he/she can see Group B in the filter drop down.
I found that the front end collection page does not obey the published/unpublished setting. unpublished items are displayed in the list.
The Filter also allows viewing of items when the ACL is set to a different user group.
The download links do not obey the ACL either. The links allow users to download files even when they are not assigned to the user group associated with the uploaded file.
[SOLVED]
I had the viewing access level set to both the Registered and individual user groups. Removing Registered from the Viewing Access Level resolved the problem.
Awards for the best Joomla app. This product is gonna win an award for this amazing job. Cook Self Service is the the best application from all over the Joomla universe ! It brings Joomla to a professional level really advanced for developers. It is a real fun to develop with it. The ACL part and security checks implementation are just... so much hours saved. I can now concentrate myself more on the design part and the creative works. Thank you so much. Guys I offer you all my congratulation ! Keep up the works because Joomla is needing it to increase the quality of extensions availables on the JED. I also learned a lot because I can see how to code at the proper place and I found all my answers reading the forum. lack_hanson (JED)
