News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

Permissions question

Started by Sir Osis of Liver, July 12, 2018, 06:26:09 PM

Previous topic - Next topic

Sir Osis of Liver

Forum upgraded from 1.1.18 -> 2.0.15, long time member can't see post history in his Profile.  Screenshot shows 'Profile Info' menu is not displayed.  Checking permissions, he's in 'Hero Member' post count membergroup, no primary membergroup, no additional groups.  'Inherit permissions' for this group is set to 'No - Use Unique Permissions'.  'Hero member' has 4 permissions in group listing, only two are checked in permissions listing (view attachments, post attachments). 

Quote
Show previous posts of this person does not show in my profile page. Okay, here is what I have discovered. This is happening when using Chrome, Mozilla, but it will show in Safari.

How is he able to post with no permissions?

How can permissions be different in different browsers?
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Arantor

So go to his profile while logged in as an admin, to Show Permissions and see what he has. You know just fine that he will be in the Registered Members group for permissions as well as his post count group.

Sir Osis of Liver

He has permission from Regular Members to 'View profile summary and stats - Any profile', but doesn't see the menu.  His screenshot has 'Modify Profile' as top menu.

Maybe I'll hack into his account and see what he's seeing.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Arantor

Maybe you have a dodgy mod somewhere.

Sir Osis of Liver

Don't think so, it's a clean install with these mods -

1. Stop Forum Spam 1.0
2. Responsive Curve 1.0.0
3. The Rules 1.3   
4. Resize Attached Images

Error log is clean (except for user errors), server log is clean.  Big database (1gb), posts go back to 2006, but that shouldn't have anything to do with it.  Apparently this problem was noticed after upgrade.  Odd that it shows up in some browsers, not others.



Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Sir Osis of Liver

#5
Hacked into his account on test install (running original production db), I see what he sees, first profile menu is missing.  He has permission to 'View profile summary and stats - Any profile'.

Just hacked into second account, same group, same permissions.  'Profile Info' is not displayed to member, visible to admin.

Registered new member, gave him 600 posts to put him in Hero group, same thing, can't see 'Profile Info'.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Illori

do you have permissions for the post count groups? if so check what is granted or not granted for them.

https://custom.simplemachines.org/mods/index.php?mod=2703 might be useful as well.

Sir Osis of Liver

Ok, fixed the permissions, now it's working correctly, but not sure why this glitch showed up after upgrade.  Post count group was set for unique permissions, had only 2 permissions.  When group permissions were changed to inherit regular members, it had no effect.  Regular members had permission to 'View profile summary and stats' for any profile, but not own profile.  Apparently any profile does not include own profile.  Did these permissions work differently in 1.1?

Also, why would permissions be applied differently in different browsers?
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Aleksi "Lex" Kilpinen

Own and Any are 2 different permissions, browser should have 0 effect on permissions though. Permissions are handled serverside.
Slava
Ukraini!
"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum. Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas

How you can help SMF

Advertisement: