silverstripe permissions not showing correctly under role

[sunnysideup]

Module version(s) affected

5.x-dev, 6.x-dev

Description

Here are the permissions for a user role I have created on https://demo.silverstripe.org/.

I am showing the bug on the demo site:

and now I enter my credentials to edit it:

How to reproduce

Try it for yourself on the demo site:

1. create role with some permissions
2. log out
3. log back in
4. review permissions for role
5. enter your credentials for sudo mode
6. review permissions again
7. now note that (4) and (6) show different results. (4) misleads you into thinking that the user role does not have any permissions.

Possible Solution

The readonly form should show greyed out permissions (i.e. we are not going to tell you what permissions there are until you are in sudo mode) and / or green ticks for the permissions that are applied and/or hide the permissions form field until sudo mode is enabled.

Additional Context

None.

Validations

• Check that there isn't already an issue that reports the same bug
• Double check that your reproduction steps work in a fresh installation of silverstripe/installer (with any code examples you've provided)

[michalkleiner]

Hmm, seems to work ok for me. Can you clarify the reproduction steps @sunnysideup?

[sunnysideup]

It works for groups, but it does not work for roles. Could we get an LLM to make a pull request for this?

[michalkleiner]

Yep, confirmed it's an issue for roles, not for groups.

Happy for you to submit a fix, whether done by a human or by AI, as long as it meets the contribution guidelines.