joomla/joomla-cms — pull request #3888 by sanderpotjer (2014-07-12 11:04:07+00:00)
Title: [#33914] Fix ACL of redirect manager

Currently several ACL checks are performed against the "core.admin" (Configure) action for the Redirect Manager, which isn't correct. This patch fixes the wrong checks.

JoomlaCode: http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=33914

## Test instructions:
- Create a new user group "Test" with Public as Parent Group
- Go to the Global Configuration, tab permissions, and allow "Admin Login" for this group
- Go to Users -> Access Levels, open level "Special" and assign the group "Test" to the level
- Go to the Redirect manager, click on the Options button, open the permissions tab and allow these actions for the "Test" user group:
- "Access Administration Interface"
- "Edit"
- "Edit State"
- "Delete"
- Create test user, assign to Test group only
- Login with test user
- Confirm that you can't:
- change the state of a redirect item
- empty the items that are in the trash
- select one or more item(s), and update the Destination URL by using the "Destination URL" feature at the bottom of the page
- apply patch
- Confirm that your test user now can:
- change the state of a redirect item (Edit State)
- empty the items that are in the trash (Delete)
- select one or more item(s), and update the Destination URL by using the "Destination URL" feature at the bottom of the page (Edit)
- Change the permissions for the mentioned actions, and confirm you can or con't perform above actions depending the ACL setting.

Thanks you for testing!