Tjyylli

First use of “packing” as in carrying a gun

How many people can fit inside Mordenkainen's Magnificent Mansion?

Finding the path in a graph from A to B then back to A with a minimum of shared edges

How did the audience guess the pentatonic scale in Bobby McFerrin's presentation?

Hopping to infinity along a string of digits

Does Parliament hold absolute power in the UK?

Create an outline of font

University's motivation for having tenure-track positions

Did the UK government pay "millions and millions of dollars" to try to snag Julian Assange?

Is this wall load bearing? Blueprints and photos attached

What's the point in a preamp?

How does ice melt when immersed in water

What do you call a plan that's an alternative plan in case your initial plan fails?

In horse breeding, what is the female equivalent of putting a horse out "to stud"?

How to test the equality of two Pearson correlation coefficients computed from the same sample?

Segmentation fault output is suppressed when piping stdin into a function. Why?

What information about me do stores get via my credit card?

Working through the single responsibility principle (SRP) in Python when calls are expensive

Do working physicists consider Newtonian mechanics to be "falsified"?

Can withdrawing asylum be illegal?

Problems with Ubuntu mount /tmp

ELI5: Why do they say that Israel would have been the fourth country to land a spacecraft on the Moon and why do they call it low cost?

Windows 10: How to Lock (not sleep) laptop on lid close?

Road tyres vs "Street" tyres for charity ride on MTB Tandem

RequirePermission not working

1

I'm using the requirePermission tag in the templates for my Craft multisite. I only want users who have access to 'edit' that site be able to view it.

My code is:

{% requirePermission('editSite: (currentSite.id)') %}

It works fine when logged in as admin, however it returns a 403 for every other user, regardless of their permissions. Please help!

I'm aware I can use requireLogin but I want users to have access to some sites and not others

templating permissions

share|improve this question

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

1

I'm using the requirePermission tag in the templates for my Craft multisite. I only want users who have access to 'edit' that site be able to view it.

My code is:

{% requirePermission('editSite: (currentSite.id)') %}

It works fine when logged in as admin, however it returns a 403 for every other user, regardless of their permissions. Please help!

I'm aware I can use requireLogin but I want users to have access to some sites and not others

templating permissions

share|improve this question

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

add a comment | 

I'm using the requirePermission tag in the templates for my Craft multisite. I only want users who have access to 'edit' that site be able to view it.

My code is:

{% requirePermission('editSite: (currentSite.id)') %}

It works fine when logged in as admin, however it returns a 403 for every other user, regardless of their permissions. Please help!

I'm aware I can use requireLogin but I want users to have access to some sites and not others

templating permissions

share|improve this question

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

{% requirePermission('editSite: (currentSite.id)') %}

share|improve this question

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked yesterday

Aron15Aron15

82

New contributor

Aron15 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked yesterday

Aron15Aron15

82

1 Answer
1

active

oldest

votes

2

You want:

{% requirePermission("editSite:#{currentSite.id}") %}

The way you have it now, the permission it's checking is the literal string editSite: (currentSite.id) which no one will have permission for.

Edit:

Craft 3.1 doesn't store IDs anymore for permissions, instead it uses always the uids because of the project config. This is a breaking change for many existing projects so keep that in mind.

{% requirePermission("editSite:#{currentSite.uid}") %}

c.f.: Twig string interpolation

share|improve this answer

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you, it still returns a 403 though? Could this be a Craft bug with permissions?
  
  – Aron15
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @Aron15 please see my edit
  
  – Robin Schambach
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you both!
  
  – Aron15
  yesterday
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "563"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

Aron15 is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcraftcms.stackexchange.com%2fquestions%2f30125%2frequirepermission-not-working%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

2

You want:

{% requirePermission("editSite:#{currentSite.id}") %}

The way you have it now, the permission it's checking is the literal string editSite: (currentSite.id) which no one will have permission for.

Edit:

Craft 3.1 doesn't store IDs anymore for permissions, instead it uses always the uids because of the project config. This is a breaking change for many existing projects so keep that in mind.

{% requirePermission("editSite:#{currentSite.uid}") %}

c.f.: Twig string interpolation

share|improve this answer

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you, it still returns a 403 though? Could this be a Craft bug with permissions?
  
  – Aron15
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @Aron15 please see my edit
  
  – Robin Schambach
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you both!
  
  – Aron15
  yesterday
  

  
  
  
  

add a comment | 

2

You want:

{% requirePermission("editSite:#{currentSite.id}") %}

The way you have it now, the permission it's checking is the literal string editSite: (currentSite.id) which no one will have permission for.

Edit:

Craft 3.1 doesn't store IDs anymore for permissions, instead it uses always the uids because of the project config. This is a breaking change for many existing projects so keep that in mind.

{% requirePermission("editSite:#{currentSite.uid}") %}

c.f.: Twig string interpolation

share|improve this answer

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you, it still returns a 403 though? Could this be a Craft bug with permissions?
  
  – Aron15
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @Aron15 please see my edit
  
  – Robin Schambach
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thank you both!
  
  – Aron15
  yesterday
  

  
  
  
  

add a comment | 

You want:

{% requirePermission("editSite:#{currentSite.id}") %}

The way you have it now, the permission it's checking is the literal string editSite: (currentSite.id) which no one will have permission for.

Edit:

Craft 3.1 doesn't store IDs anymore for permissions, instead it uses always the uids because of the project config. This is a breaking change for many existing projects so keep that in mind.

{% requirePermission("editSite:#{currentSite.uid}") %}

c.f.: Twig string interpolation

share|improve this answer

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

{% requirePermission("editSite:#{currentSite.id}") %}

{% requirePermission("editSite:#{currentSite.uid}") %}

share|improve this answer

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

edited yesterday

Robin Schambach

16.7k1830

edited yesterday

Robin Schambach

16.7k1830

answered yesterday

andrew.welchandrew.welch

8,4741224

answered yesterday

andrew.welchandrew.welch

8,4741224