Editors get logged out of Umbraco 8.18.11 when trying to edit a link in the RTE. Administrators are fine.

[tenshi04]

Which Umbraco version are you using? (Please write the exact version, example: 10.1.0)

8.18.11

Bug summary

As an Editor, they try to update an existing link in the Rich Text editor. They click on the link, and then click the link icon in the RTE control bar and they immediately get logged out.

If their permissions get elevated to Administrator, then they do not have this issue.

Version is Umbraco 8.18.11

Specifics

No response

Steps to reproduce

1. Login as an Editor

2. Go to an RTE

3. CLick on the Link button in the RTE control bar

4. The user is logged out.

5. Login as an Administrator

6. Go to an RTE

7. CLick on the Link button in the RTE control bar

8. The link panel opens without problem.

Expected result / actual result

The editor user should not be logged out when editing a link in the RTE

[github-actions]

Hi there @tenshi04!

Firstly, a big thank you for raising this issue. Every piece of feedback we receive helps us to make Umbraco better.

We really appreciate your patience while we wait for our team to have a look at this but we wanted to let you know that we see this and share with you the plan for what comes next.

• We'll assess whether this issue relates to something that has already been fixed in a later version of the release that it has been raised for.
• If it's a bug, is it related to a release that we are actively supporting or is it related to a release that's in the end-of-life or security-only phase?
• We'll replicate the issue to ensure that the problem is as described.
• We'll decide whether the behavior is an issue or if the behavior is intended.

We wish we could work with everyone directly and assess your issue immediately but we're in the fortunate position of having lots of contributions to work with and only a few humans who are able to do it. We are making progress though and in the meantime, we will keep you in the loop and let you know when we have any questions.

Thanks, from your friendly Umbraco GitHub bot 🤖 🙂

[andr317c]

Hey!
Thanks for reporting this issue. I was unable to reproduce it, I followed the reproduction steps and it works without any issues trying to update a link in an RTE for an editor. Are you able to reproduce this on a clean install?

Here is a gif of me logged in as an editor:

[tenshi04]

I think that I figured it actually might be something else. 1. User is logged in and is a member of a group that mimics the Editor group, but only has access to a certain content node and only a certain media folder. 2. On a content page, in the RTE, they actually have a link that is 'broken' and points to a media item that has been moved to the recycle bin. 3. When they try to click on the link in the RTE to try to correct it, the get logged out immediately 4. If I am logged in as an administrator (or Editor with no media folder restrictions), I do not get logged out when I try to correct the link. I think this is because I have access to the recycle bin? The group that the user belongs to does not have access to the recycle bin and I believe that this is why this is happening? Does this make sense? Should they be logged out or should they have the ability to correct the link?

[andr317c]

Hey again! It makes more sense now! The mimic editor group users should not be logged out when they try to edit the broken link. I was able to reproduce your issue, but as far as I can see it is not a regression issue. I tried testing it on 8.10.0 and I had the same issue there. Since we do not provide fixes for bugs that aren't regression issues for Umbraco 8, I will go ahead and close this issue.