Admin can't change post access type

Developer help
1

The Admin account of the Ghost website I am currently setting up is not able to change posts access from Public to Members or Paid members only. It shows this error:
Permission error, cannot edit post. You do not have permission to edit posts

Logging in as owner, everything works perfectly

  • What version of Ghost are you using?: 3.15.3

  • What configuration? Hosted on Digital Ocean

  • What errors or information do you see in the console?

      [2020-05-17 14:09:38] ERROR "PUT /ghost/api/v3/admin/posts/5ec054fb4b9c4b04c9e2829c/" 403 48ms

 NAME: NoPermissionError
 MESSAGE: You do not have permission to edit posts

 level: normal

 NoPermissionError: You do not have permission to perform this action
     at new NoPermissionError (/var/www/ghost/versions/3.15.3/node_modules/ghost-ignition/lib/errors/index.js:127:23)
     at Function.permissible (/var/www/ghost/versions/3.15.3/core/server/models/post.js:998:31)
     at Function.permissible (/var/www/ghost/versions/3.15.3/core/server/models/relations/authors.js:429:41)
     at Child.then (/var/www/ghost/versions/3.15.3/core/server/models/relations/authors.js:362:49)
     at Child.tryCatcher (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/util.js:16:23)
     at Promise._settlePromiseFromHandler (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/promise.js:547:31)
     at Promise._settlePromise (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/promise.js:604:18)
     at Promise._settlePromise0 (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/promise.js:649:10)
     at Promise._settlePromises (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/promise.js:729:18)
     at _drainQueueStep (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/async.js:93:12)
     at _drainQueue (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/async.js:86:9)
     at Async._drainQueues (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/async.js:102:5)
     at Immediate.Async.drainQueues [as _onImmediate] (/var/www/ghost/versions/3.15.3/node_modules/bluebird/js/release/async.js:15:14)
     at runCallback (timers.js:705:18)
     at tryOnImmediate (timers.js:676:5)
     at processImmediate (timers.js:658:5)
     at process.topLevelDomainCallback (domain.js:126:23)

  • What steps could someone else take to reproduce the issue you’re having?

    • Create a post with an Admin user, Public access, publish it
    • Try to change the post access to Members only or Paid Members: it throws the error.
    • Log in as owner, change the post access and it works!
2

Hmm, this does seem odd. The site owner technically is a different staff member type. Are you able to make other modifications to the post as an admin user?

3

@DavidDarnes Yes, as an admin I can add or remove tags, edit or feature the post and even change the author. Definitely not able to change the access type.

1 Like
4

Hey @dandooze, thanks for the report! The fix has landed in master and will be available with next release of Ghost.

3 Likes
5

@naz amazing! Thanks!

1 Like
6

@dandooze We just released the fix in 3.16.1 :grinning:

3 Likes