I have a combo box filter on a front end collection page. That filter uses a Foreign Key field. The Foreign Key table includes an Access Control field.
PROBLEM: The combo box filter contains items that should be hidden based on the user's assigned group.
Example: The user is a member of Group A and C. There are Items that are assigned (Joomla ACL) to members of Group B. When the user visits the collection page, he/she can see Group B in the filter drop down.
I found that the front end collection page does not obey the published/unpublished setting. unpublished items are displayed in the list.
The Filter also allows viewing of items when the ACL is set to a different user group.
The download links do not obey the ACL either. The links allow users to download files even when they are not assigned to the user group associated with the uploaded file.
[SOLVED]
I had the viewing access level set to both the Registered and individual user groups. Removing Registered from the Viewing Access Level resolved the problem.
Hi All just wanted to add one more "thank you" voice to all those who discovered the value of this amazing application. The website I was working on went to production few days ago and I do not want to even try to imagine what would it take to build it without j-cook. So - endless thanks keep it running and evolving I believe it deserves to be the core tool for any joomla application! Thanks! Michael (bmk028 - Forum)
