I have a combo box filter on a front end collection page. That filter uses a Foreign Key field. The Foreign Key table includes an Access Control field.
PROBLEM: The combo box filter contains items that should be hidden based on the user's assigned group.
Example: The user is a member of Group A and C. There are Items that are assigned (Joomla ACL) to members of Group B. When the user visits the collection page, he/she can see Group B in the filter drop down.
I found that the front end collection page does not obey the published/unpublished setting. unpublished items are displayed in the list.
The Filter also allows viewing of items when the ACL is set to a different user group.
The download links do not obey the ACL either. The links allow users to download files even when they are not assigned to the user group associated with the uploaded file.
[SOLVED]
I had the viewing access level set to both the Registered and individual user groups. Removing Registered from the Viewing Access Level resolved the problem.
I jumped and started to work on a demo component... but 2 days later this demo component became the real component. I just showed today the end result to my customer and he turned to me and said... "this is more than I expected"... All of this is because Cook did cut about 70% of my work and provided me more ways to improve the usability of the component. The end result was 17 tables all related between than to generate a full dashboard for the travel agents. Thanks for Cook developers for such great tool. This component would not be possible to be done at short time with all the features in it Griiettner (Forum)