CB Blogs K2 integration does not respect K2 groups authorization

here is Fotis answer :

Yeah, sorry we don't have the exact HTML ready. But it's not difficult to search the code for relevant examples, as the drop-down is used in many places. E.g.:

github.com/getk2/k2/blob/e574284dfbef1cc01d967b08fb734fcf90e41faf/administrator/components/com_k2/views/categories/view.html.php#L143-L149

That's just calling K2ModelCategories->getData, which doesn't do access checks either. K2ModelItemlist->getData does, but those functions also do filtering and other things. We basically just want a list of access checked categories. Will review how to go about this as will likely just query the database directly and parse the data ourselves.

forge.joomlapolis.com/issues/8046

I am coming back on this subject

It seems resolved on the forge but our users have still accesses to all categories whatever k2 groups they are in.
The function may check main joomla accesses but surely does not check what group the user belongs to in order to allow him access to authorized categories or not

Mind to have a look ?

Works perfectly fine in my tests. See the below with it working. We're using K2s own API to get a list of accessible categories so if it's still not working it's probably an issue with your category configuration.

K2 Categories


Blog Categories

You are right for joomla user groups but it does not work for K2 user groups

Sorry, I don't know how to support those. I'm just directly calling K2s own API requesting a list of accessible categories. Specifically the below.


I don't see any other API for getting a category list so I've no idea how to apply those permissions to the categories list and there's no documentation for this.