[Bug] Non-admin access #418

New issue

Closed

opened 2025-04-29 17:25:06 +02:00 by corentin · 3 comments

corentin commented

2025-04-29 17:25:06 +02:00

Environment

Custom menu version:
Nextcloud version:
PHP version:
Web server (Nginx, Apache2):
Web browser and version (Firefox 80, Google Chrome 74, etc): Firefox 137.0.1

Question

Hi, thank you for your app :)

We have installed side_menu, and we can customize the menu aspect if we're an admin. If we're not an admin, a GET request to cloud.url/apps/side_menu/user/config returns a 403, and the js of the app then crashes.

If we add admin rights to a user, then the user can configure the side menu. Then if we remove admin privileges to the user, the config of side menu is still displayed (all the configured links), but the config page is now blank again, with the same 403 error on cloud.url/apps/side_menu/user/config.

Is this a normal behavior?

### Environment * Custom menu version: * Nextcloud version: * PHP version: * Web server (Nginx, Apache2): * Web browser and version (Firefox 80, Google Chrome 74, etc): Firefox 137.0.1 ### Question Hi, thank you for your app :) We have installed side_menu, and we can customize the menu aspect if we're an admin. If we're not an admin, a GET request to `cloud.url/apps/side_menu/user/config` returns a 403, and the js of the app then crashes. If we add admin rights to a user, then the user can configure the side menu. Then if we remove admin privileges to the user, the config of side menu is still displayed (all the configured links), but the config page is now blank again, with the same 403 error on `cloud.url/apps/side_menu/user/config`. Is this a normal behavior?