{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/8083","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/8083/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/8083/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/8083/events","html_url":"https://github.com/joomla/joomla-cms/pull/8083","id":111141539,"number":8083,"title":"Prevent create categories in first level if user is not allowed","user":{"login":"n9iels","id":2659866,"avatar_url":"https://avatars.githubusercontent.com/u/2659866?v=3","gravatar_id":"","url":"https://api.github.com/users/n9iels","html_url":"https://github.com/n9iels","followers_url":"https://api.github.com/users/n9iels/followers","following_url":"https://api.github.com/users/n9iels/following{/other_user}","gists_url":"https://api.github.com/users/n9iels/gists{/gist_id}","starred_url":"https://api.github.com/users/n9iels/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/n9iels/subscriptions","organizations_url":"https://api.github.com/users/n9iels/orgs","repos_url":"https://api.github.com/users/n9iels/repos","events_url":"https://api.github.com/users/n9iels/events{/privacy}","received_events_url":"https://api.github.com/users/n9iels/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/joomla/joomla-cms/labels/PR-staging","name":"PR-staging","color":"c7def8"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-10-13T09:26:33Z","updated_at":"2015-10-13T14:31:12Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/joomla/joomla-cms/pulls/8083","html_url":"https://github.com/joomla/joomla-cms/pull/8083","diff_url":"https://github.com/joomla/joomla-cms/pull/8083.diff","patch_url":"https://github.com/joomla/joomla-cms/pull/8083.patch"},"body":"This PR will fix a part of the issues described in #8069 \r\n\r\n## The issue\r\nA user with ACL right to create, delete, edit, edit State, edit own in a specified category can also create new categories on the first level. (no parent)\r\n\r\n## How to test\r\n1. Create a usergroup with registered as parent\r\n2. Select that group in the \"Special\" view/access level\r\n3. In Global configuration, allow Administrator Login for this group\r\n4. In the Global options of Articles, Categories and Featured Articles set \"Access Administrator interface\" to <i>Allowd</i> for that group\r\n5. Create a new category and set the permissions of hat categories for the new user group for the following item on <i>allowed</i>:\r\n - Create\r\n - Delete\r\n - Edit\r\n - Edit state\r\n - Edit Own\r\n6. Create a new user for the created user group\r\n7. Login with the user on the back-end\r\n8. Click on the create button and notice you can create a category for \"no parent\"\r\n9. Apply patch, and notice you can't create categories for \"no parent\" any more\r\n\r\n## Note\r\nCan someone please review if this is a good solution? I know it solves the issue, but I don't know exactly why that piece of code was placed"},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/147732862","html_url":"https://github.com/joomla/joomla-cms/pull/8083#issuecomment-147732862","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/8083","id":147732862,"user":{"login":"Webdongle","id":1115202,"avatar_url":"https://avatars.githubusercontent.com/u/1115202?v=3","gravatar_id":"","url":"https://api.github.com/users/Webdongle","html_url":"https://github.com/Webdongle","followers_url":"https://api.github.com/users/Webdongle/followers","following_url":"https://api.github.com/users/Webdongle/following{/other_user}","gists_url":"https://api.github.com/users/Webdongle/gists{/gist_id}","starred_url":"https://api.github.com/users/Webdongle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Webdongle/subscriptions","organizations_url":"https://api.github.com/users/Webdongle/orgs","repos_url":"https://api.github.com/users/Webdongle/repos","events_url":"https://api.github.com/users/Webdongle/events{/privacy}","received_events_url":"https://api.github.com/users/Webdongle/received_events","type":"User","site_admin":false},"created_at":"2015-10-13T14:31:12Z","updated_at":"2015-10-13T14:31:12Z","body":"OK ... as soon as I get the email will test it"}}