Open
Description
This issue prevents me for example from creating a user that would be able to review the content changes, without giving this user the superuser status.
Steps to reproduce
- create a user with
staff
status, but nosuperuser
status - to this user add for example the following permissions
- cms | cms plugin | Can add cms plugin
- cms | cms plugin | Can change cms plugin
- cms | cms plugin | Can delete cms plugin
- cms | cms plugin | Can view cms plugin
- cms | page | Can add page
- cms | page | Can change page
- cms | page | Can delete page
- cms | page | Can edit static placeholders
- cms | page | Can publish page
- cms | page | Can view page
- cms | placeholder | Can add placeholder
- cms | placeholder | Can change placeholder
- cms | placeholder | Can delete placeholder
- cms | placeholder | Can use Structure mode
- cms | placeholder | Can view placeholder
- go to the admin homepage and see that user still can't access the pages list
- go to the homepage and see that the user can't see the pending admin changes or access the structure mode
Additional information
- a test project example on a native divio instance with no code modifications - https://test-ubs-stage.us.aldryn.io
- superuser login/password - test@what.digital/test@what.digital
- the user can be found here - https://test-ubs-stage.us.aldryn.io/en/admin/cms/pageuser/2/change/
- the login/password from that user is victor+test@what.digital/victor+test@what.digital
- divio project - https://control.divio.com/control/5901/edit/77030/
Environment:
- django 2.2.8.1
- cms 3.7.1.1