joomla/joomla-cms — pull request #3889 by sanderpotjer (2014-07-12 15:22:52+00:00)
Title: [#33914] Fix ACL of redirect manager (J2.5)

Currently several ACL checks are performed against the "core.admin" (Configure) action for the Redirect Manager, which isn't correct. This patch fixes the wrong checks.

JoomlaCode: http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=33914
Pull Request for Joomla 3: https://github.com/joomla/joomla-cms/pull/3888

## Test instructions:
- Create a new user group "Test" with Public as Parent Group
- Go to the Global Configuration, tab permissions, and allow "Admin Login" for this group
- Go to Users -> Access Levels, open level "Special" and assign the group "Test" to the level
- Go to the Redirect manager, click on the Options button, open the permissions tab and allow these actions for the "Test" user group:
- "Access Administration Interface"
- "Edit"
- "Edit State"
- "Delete"
- Create test user, assign to Test group only
- Login with test user
- Confirm that you can't:
- change the state of a redirect item
- empty the items that are in the trash
- select one or more item(s), and update the Destination URL by using the "Destination URL" feature at the bottom of the page
- apply patch
- Confirm that your test user now can:
- change the state of a redirect item (Edit State)
- empty the items that are in the trash (Delete)
- select one or more item(s), and update the Destination URL by using the "Destination URL" feature at the bottom of the page (Edit)
- Change the permissions for the mentioned actions, and confirm you can or con't perform above actions depending the ACL setting.

Thank you for testing!