Missing group list user field in site frontend editing – ok?

[muhme]

Steps to reproduce the issue

All with the admin superuser:

• Create field group 'fieldGroup'
• Create fields 'user', 'usergrouplist' and 'url' with respective types, assign to 'fieldGroup'
• Create featured article

Expected result

• All three fields are shown and editable for an article in administrator backend and site frontend view

Actual result

• Administrator backend edit view is working
• Site frontend edit view is not showing the user field

System information (as much as possible)

• Tested with 5.4-dev
• User field content is shown for the article, but in editing the article the field is not existing in the field group

Additional comments

• Found in testing [5.4] Deprecate app property in FieldsPlugin #45695 and it is unclear it should be like this?

[richard67]

Could it be caused by different permissions for different user groups for the 2 fields?

[brianteeman]

Cannot replicate this. Tested with the sample data and I can edit the author custom field in the front end

[muhme]

Could it be caused by different permissions for different user groups for the 2 fields?

No, all permissions are inherited, as with the other fields.

Cannot replicate this. Tested with the sample data and I can edit the author custom field in the front end

The field 'About the Author' from 'Blog Sample Data' is of type textarea. The problem in this issue is with the user type field.

[brianteeman]

Sorry I misread your original post

joomla-cms/plugins/fields/user/src/Extension/User.php

Line 45 in 5ce363b

// The user field is not working on the front end

[brianteeman]

I would assume its a security issue as you wouldnt want someone with permissions as low as an author to be able to enumerate all the users on a site

[muhme]

I would assume its a security issue as you wouldnt want someone with permissions as low as an author to be able to enumerate all the users on a site

All steps are with the initial admin superuser. I extended the description.