Should XML Import have its own User Type permission?
  • Vote Up0Vote Down Daniel JamesDaniel James
    Posts: 844Member, Sourcefabric Team

    Hi devs,

    Looking at the XML Import feature today, I noticed it has the option to
    overwrite existing articles, which is potentially dangerous of course.
    At the moment, it's not possible to select a Publication, Issue, or
    Section to import into, because these drop-down menus are greyed out -
    so it's not *too* dangerous. However this behaviour has a ticket open to
    be fixed,

    I couldn't find any corresponding checkbox for the right to perform the
    XML Import action in the Staff User Types. I would have thought this
    right should be reserved for senior administrators only, by default.

    It would also help to clarify what the overwrite action does - does it
    replace all existing articles in the database, or only those articles
    with matching names from a previous XML import?