Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: Sir Osis of Liver on July 12, 2018, 06:26:09 PM

Title: Permissions question
Post by: Sir Osis of Liver on July 12, 2018, 06:26:09 PM
Forum upgraded from 1.1.18 -> 2.0.15, long time member can't see post history in his Profile.  Screenshot shows 'Profile Info' menu is not displayed.  Checking permissions, he's in 'Hero Member' post count membergroup, no primary membergroup, no additional groups.  'Inherit permissions' for this group is set to 'No - Use Unique Permissions'.  'Hero member' has 4 permissions in group listing, only two are checked in permissions listing (view attachments, post attachments). 

Quote
Show previous posts of this person does not show in my profile page. Okay, here is what I have discovered. This is happening when using Chrome, Mozilla, but it will show in Safari.

How is he able to post with no permissions?

How can permissions be different in different browsers?
Title: Re: Permissions question
Post by: Arantor on July 12, 2018, 06:28:40 PM
So go to his profile while logged in as an admin, to Show Permissions and see what he has. You know just fine that he will be in the Registered Members group for permissions as well as his post count group.
Title: Re: Permissions question
Post by: Sir Osis of Liver on July 12, 2018, 06:47:27 PM
He has permission from Regular Members to 'View profile summary and stats - Any profile', but doesn't see the menu.  His screenshot has 'Modify Profile' as top menu.

Maybe I'll hack into his account and see what he's seeing.
Title: Re: Permissions question
Post by: Arantor on July 12, 2018, 06:54:17 PM
Maybe you have a dodgy mod somewhere.
Title: Re: Permissions question
Post by: Sir Osis of Liver on July 12, 2018, 06:59:55 PM
Don't think so, it's a clean install with these mods -

1. Stop Forum Spam 1.0
2. Responsive Curve 1.0.0
3. The Rules 1.3   
4. Resize Attached Images

Error log is clean (except for user errors), server log is clean.  Big database (1gb), posts go back to 2006, but that shouldn't have anything to do with it.  Apparently this problem was noticed after upgrade.  Odd that it shows up in some browsers, not others.



Title: Re: Permissions question
Post by: Sir Osis of Liver on July 12, 2018, 07:07:39 PM
Hacked into his account on test install (running original production db), I see what he sees, first profile menu is missing.  He has permission to 'View profile summary and stats - Any profile'.

Just hacked into second account, same group, same permissions.  'Profile Info' is not displayed to member, visible to admin.

Registered new member, gave him 600 posts to put him in Hero group, same thing, can't see 'Profile Info'.
Title: Re: Permissions question
Post by: Illori on July 13, 2018, 05:15:55 AM
do you have permissions for the post count groups? if so check what is granted or not granted for them.

https://custom.simplemachines.org/mods/index.php?mod=2703 might be useful as well.
Title: Re: Permissions question
Post by: Sir Osis of Liver on July 13, 2018, 01:13:09 PM
Ok, fixed the permissions, now it's working correctly, but not sure why this glitch showed up after upgrade.  Post count group was set for unique permissions, had only 2 permissions.  When group permissions were changed to inherit regular members, it had no effect.  Regular members had permission to 'View profile summary and stats' for any profile, but not own profile.  Apparently any profile does not include own profile.  Did these permissions work differently in 1.1?

Also, why would permissions be applied differently in different browsers?
Title: Re: Permissions question
Post by: Aleksi "Lex" Kilpinen on July 14, 2018, 04:31:26 AM
Own and Any are 2 different permissions, browser should have 0 effect on permissions though. Permissions are handled serverside.