I have a combo box filter on a front end collection page. That filter uses a Foreign Key field. The Foreign Key table includes an Access Control field.
PROBLEM: The combo box filter contains items that should be hidden based on the user's assigned group.
Example: The user is a member of Group A and C. There are Items that are assigned (Joomla ACL) to members of Group B. When the user visits the collection page, he/she can see Group B in the filter drop down.
I found that the front end collection page does not obey the published/unpublished setting. unpublished items are displayed in the list.
The Filter also allows viewing of items when the ACL is set to a different user group.
The download links do not obey the ACL either. The links allow users to download files even when they are not assigned to the user group associated with the uploaded file.
[SOLVED]
I had the viewing access level set to both the Registered and individual user groups. Removing Registered from the Viewing Access Level resolved the problem.
Freakin' Awesome!!! J-Cook is simply awesome - whether you're a highly experienced developer or complete novice whether you're building a small inventory component or a complete community solution! The beauty comes from a fast slick and reliable platform that readily provides developers with everything they'll need to build the backbone of a solid and secure component with wizards for authoring access publishing aliasing created/modified by dates... you name it COOK provides it! J-Cook really surpasses all of the 'competition' as far as MVC tools are concerned! Try love it and get cooking! learnthrusong (JED)
