I have a combo box filter on a front end collection page. That filter uses a Foreign Key field. The Foreign Key table includes an Access Control field.
PROBLEM: The combo box filter contains items that should be hidden based on the user's assigned group.
Example: The user is a member of Group A and C. There are Items that are assigned (Joomla ACL) to members of Group B. When the user visits the collection page, he/she can see Group B in the filter drop down.
I found that the front end collection page does not obey the published/unpublished setting. unpublished items are displayed in the list.
The Filter also allows viewing of items when the ACL is set to a different user group.
The download links do not obey the ACL either. The links allow users to download files even when they are not assigned to the user group associated with the uploaded file.
[SOLVED]
I had the viewing access level set to both the Registered and individual user groups. Removing Registered from the Viewing Access Level resolved the problem.
For starters it's just so easy to design an app in a way that I'm used to i.e. database first then views followed by customization. The fork system is pure brilliance from a developer standpoint as I can override things and still add and update my projects with minimal effort! Truly amazing to be able to build components in Joomla using incremental refinement without having to do everything by hand. Thanks for the great tool! I am so much more productive now than ever and I can't imagine building components any other way!!!! Dave (Forum)
