{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/12693","repository_url":"https://api.github.com/repos/joomla/joomla-cms","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12693/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12693/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12693/events","html_url":"https://github.com/joomla/joomla-cms/issues/12693","id":186733925,"number":12693,"title":"[com_fields] Confusing Permissions","user":{"login":"infograf768","id":869724,"avatar_url":"https://avatars.githubusercontent.com/u/869724?v=3","gravatar_id":"","url":"https://api.github.com/users/infograf768","html_url":"https://github.com/infograf768","followers_url":"https://api.github.com/users/infograf768/followers","following_url":"https://api.github.com/users/infograf768/following{/other_user}","gists_url":"https://api.github.com/users/infograf768/gists{/gist_id}","starred_url":"https://api.github.com/users/infograf768/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/infograf768/subscriptions","organizations_url":"https://api.github.com/users/infograf768/orgs","repos_url":"https://api.github.com/users/infograf768/repos","events_url":"https://api.github.com/users/infograf768/events{/privacy}","received_events_url":"https://api.github.com/users/infograf768/received_events","type":"User","site_admin":false},"labels":[{"id":138443932,"url":"https://api.github.com/repos/joomla/joomla-cms/labels/No%20Code%20Attached%20Yet","name":"No Code Attached Yet","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2016-11-02T07:58:40Z","updated_at":"2016-11-03T08:17:17Z","closed_at":null,"body":"### Steps to reproduce the issue\r\nAs Super User, create an article  custom field.\r\nAlso Create a Field Group\r\nLogout and login as Manager or Administrator (Permissions for Edit Value is Not Allowed per default) for BOTH Fields and Field Groups\r\n![screen shot 2016-11-02 at 08 36 17](https://cloud.githubusercontent.com/assets/869724/19920201/7ac95a4c-a0d7-11e6-86e7-2220fbcb0a47.png)\r\n\r\n### Expected result\r\nNot sure\r\n\r\n### Actual result\r\nThe Manager or Administrator can edit anything in the field (and save) EXCEPT its Type which is readonly.\r\n```\r\n\t\t\t\t\t// Rendering the type\r\n\t\t\t\t\t$node = $type->appendXMLFieldTag($field, $fieldset, $form);\r\n\r\n\t\t\t\t\tif (!FieldsHelperInternal::canEditFieldValue($field))\r\n\t\t\t\t\t{\r\n\t\t\t\t\t\t$node->setAttribute('disabled', 'true');\r\n\t\t\t\t\t}\r\n```\r\n\r\n![screen shot 2016-11-02 at 08 39 14](https://cloud.githubusercontent.com/assets/869724/19920255/ea0d2b2c-a0d7-11e6-93d3-3fa81d581ee6.png\r\n\r\nThe Manager or Administrator can edit anything in the Field Group (and save)\r\n\r\n### Additional comments\r\nThis new permission tip is confusing. What is Edit Value really for? \r\n"},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/258083941","html_url":"https://github.com/joomla/joomla-cms/issues/12693#issuecomment-258083941","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/12693","id":258083941,"user":{"login":"laoneo","id":251072,"avatar_url":"https://avatars.githubusercontent.com/u/251072?v=3","gravatar_id":"","url":"https://api.github.com/users/laoneo","html_url":"https://github.com/laoneo","followers_url":"https://api.github.com/users/laoneo/followers","following_url":"https://api.github.com/users/laoneo/following{/other_user}","gists_url":"https://api.github.com/users/laoneo/gists{/gist_id}","starred_url":"https://api.github.com/users/laoneo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/laoneo/subscriptions","organizations_url":"https://api.github.com/users/laoneo/orgs","repos_url":"https://api.github.com/users/laoneo/repos","events_url":"https://api.github.com/users/laoneo/events{/privacy}","received_events_url":"https://api.github.com/users/laoneo/received_events","type":"User","site_admin":false},"created_at":"2016-11-03T08:17:17Z","updated_at":"2016-11-03T08:17:17Z","body":"The permissions should always being considered from the component the field belongs to for example here https://github.com/joomla/joomla-cms/blob/staging/administrator/components/com_fields/views/fields/view.html.php#L94. Where did you see code where it isn't?"}}
{"actor":{"display_login":"laoneo"}}