[com_banners] User not allowed to core.manage? Use 403 php exception (instead of a 404 JError)

[andrepereiradasilva]

Pull Request for Improvement.

Summary of Changes

Replace com_banners exisiting 404 JError for a 403 php exception when the user does not have access to "Access Administration Interface" (core.manage).

Before

After

Testing Instructions

1. Use latest staging
2. Create a user and add it to "Administrator" group
3. Go to com_banners and set "Access Administration Interface" (core.manage) to "Denied" for "Administrator" group
4. Login with the Administrator user in a private window and go to /administrator/index.php?option=com_banners
5. See the red message (Before)
6. Apply patch
7. Repeat step 4, you'll see now a 403 error (After).

If this change is ok i can do it for the other components that uses JError here.

[mbabker]

I'd prefer a more specific Exception class but +1 on the idea.

[andrepereiradasilva]

yes i would prefer to, but can you hint on how to add a specific exception like NotAllowedException?

[mbabker]

Well, if there isn't something in the standard SPL exceptions, just add a custom class like we have in the database API.

[andrepereiradasilva]

hum, doesn't seem to be any http://php.net/manual/en/spl.exceptions.php

[tomartailored]

I have tested this item ✅ successfully on 0cded66

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11418.}

[1apweb]

I have tested this item ✅ successfully on 0cded66

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11418.}

[truptikagathara]

I have tested this item ✅ successfully on 0cded66

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11418.}

[jeckodevelopment]

RTC please

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11418.}

[rdeutz]

I would like to see a nicer error message, this one looks very technical. I also think to have some custom exceptions would be great. Merging it anyway because this is the way to go

[andrepereiradasilva]

@rdeutz i will change to a custom exception when this #11593 gets merged

[jeckodevelopment]

what about:

You are not allowed to access this resource. Please contact your website administrator in order to get access to this resource.

or

You are not allowed to access this resource. Your website administrator can give you access to this resource just changing permissions.

[andrepereiradasilva]

people that is a language change nothing to do with this PR which porpose is to change the error to an exception.
Please make a PR for changing JERROR_ALERTNOAUTHOR if you feel the need.