Skip to content

View permissions of a Runway model not working as expected #827

Description

@HammenWS

Description

The 'view entries' entries permission makes it so that you can see the index view. But you are not permitted to 'view' the entry it self when you click on an item from the index. I expected it would behave the same as statamic's 'view entries' permission. With this permission you are able to view each item individual but everything is read only.

Steps to reproduce

Add a role with only the 'View Example Entries" permission for that Runway model. Login (or impersonate) with a user with that role.
You will be able to see the index view. But when you click on an item you will get an "This action is unauthorized" error message.

Environment

Environment
Laravel Version: 12.58.0
PHP Version: 8.4.18
Composer Version: 2.9.5
Environment: local
Debug Mode: ENABLED
Maintenance Mode: OFF
Timezone: UTC
Locale: nl

Cache
Config: NOT CACHED
Events: NOT CACHED
Routes: NOT CACHED
Views: CACHED

Drivers
Broadcasting: log
Cache: file
Database: mysql
Logs: stack / single
Mail: smtp
Queue: database
Session: database

Storage
public/storage: LINKED

Sentry
Enabled: MISSING DSN
Environment: local
Laravel SDK Version: 4.25.1
PHP SDK Version: 4.27.0
Release: NOT SET
Sample Rate Errors: 100%
Sample Rate Performance Monitoring: 100%
Sample Rate Profiling: NOT SET
Send Default PII: DISABLED

Statamic
Addons: 3
License Key: Not set
Sites: 1
Stache Watcher: Enabled (auto)
Static Caching: Disabled
Version: 6.18.1 PRO

Statamic Addons
statamic-rad-pack/runway: 9.4.5
statamic/eloquent-driver: 5.7.0
statamic/seo-pro: 7.8.5

Statamic Eloquent Driver
Addon Settings: file
Asset Containers: eloquent
Assets: eloquent
Blueprints: file
Collection Trees: eloquent
Collections: file
Entries: eloquent
Fieldsets: file
Form Submissions: eloquent
Forms: file
Global Sets: file
Global Variables: eloquent
Navigation Trees: eloquent
Navigations: file
Revisions: file
Sites: file
Taxonomies: file
Terms: eloquent
Tokens: eloquent

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions