Advertisement:

Author Topic: Permissions question  (Read 290 times)

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,330
  • Riding the endless highway in the sky.
Permissions question
« on: July 12, 2018, 06:26:09 PM »
Forum upgraded from 1.1.18 -> 2.0.15, long time member can't see post history in his Profile.  Screenshot shows 'Profile Info' menu is not displayed.  Checking permissions, he's in 'Hero Member' post count membergroup, no primary membergroup, no additional groups.  'Inherit permissions' for this group is set to 'No - Use Unique Permissions'.  'Hero member' has 4 permissions in group listing, only two are checked in permissions listing (view attachments, post attachments). 

Quote
Show previous posts of this person does not show in my profile page. Okay, here is what I have discovered. This is happening when using Chrome, Mozilla, but it will show in Safari.

How is he able to post with no permissions?

How can permissions be different in different browsers?

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,459
    • StoryBB/StoryBB on GitHub
Re: Permissions question
« Reply #1 on: July 12, 2018, 06:28:40 PM »
So go to his profile while logged in as an admin, to Show Permissions and see what he has. You know just fine that he will be in the Registered Members group for permissions as well as his post count group.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,330
  • Riding the endless highway in the sky.
Re: Permissions question
« Reply #2 on: July 12, 2018, 06:47:27 PM »
He has permission from Regular Members to 'View profile summary and stats - Any profile', but doesn't see the menu.  His screenshot has 'Modify Profile' as top menu.

Maybe I'll hack into his account and see what he's seeing.

Offline Arantor

  • Resident Overthinker
  • SMF Friend
  • SMF Legend
  • *
  • Posts: 69,459
    • StoryBB/StoryBB on GitHub
Re: Permissions question
« Reply #3 on: July 12, 2018, 06:54:17 PM »
Maybe you have a dodgy mod somewhere.
Don’t try to tell me that some power can corrupt a person. You haven’t had enough to know what it’s like.

No good deed goes unpunished / No act of charity goes unresented.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,330
  • Riding the endless highway in the sky.
Re: Permissions question
« Reply #4 on: July 12, 2018, 06:59:55 PM »
Don't think so, it's a clean install with these mods -

1. Stop Forum Spam 1.0
2. Responsive Curve 1.0.0
3. The Rules 1.3   
4. Resize Attached Images

Error log is clean (except for user errors), server log is clean.  Big database (1gb), posts go back to 2006, but that shouldn't have anything to do with it.  Apparently this problem was noticed after upgrade.  Odd that it shows up in some browsers, not others.




Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,330
  • Riding the endless highway in the sky.
Re: Permissions question
« Reply #5 on: July 12, 2018, 07:07:39 PM »
Hacked into his account on test install (running original production db), I see what he sees, first profile menu is missing.  He has permission to 'View profile summary and stats - Any profile'.

Just hacked into second account, same group, same permissions.  'Profile Info' is not displayed to member, visible to admin.

Registered new member, gave him 600 posts to put him in Hero group, same thing, can't see 'Profile Info'.
« Last Edit: July 12, 2018, 07:34:47 PM by Sir Osis of Liver »

Offline Illori

  • Project Manager
  • SMF Master
  • *
  • Posts: 49,991
Re: Permissions question
« Reply #6 on: July 13, 2018, 05:15:55 AM »
do you have permissions for the post count groups? if so check what is granted or not granted for them.

https://custom.simplemachines.org/mods/index.php?mod=2703 might be useful as well.

Offline Sir Osis of Liver

  • SMF Hero
  • ******
  • Posts: 8,330
  • Riding the endless highway in the sky.
Re: Permissions question
« Reply #7 on: July 13, 2018, 01:13:09 PM »
Ok, fixed the permissions, now it's working correctly, but not sure why this glitch showed up after upgrade.  Post count group was set for unique permissions, had only 2 permissions.  When group permissions were changed to inherit regular members, it had no effect.  Regular members had permission to 'View profile summary and stats' for any profile, but not own profile.  Apparently any profile does not include own profile.  Did these permissions work differently in 1.1?

Also, why would permissions be applied differently in different browsers?

Offline Aleksi "Lex" Kilpinen

  • A Peculiar Finn
  • Lead Support Specialist
  • SMF Super Hero
  • *
  • Posts: 17,493
  • Gender: Male
  • Don't worry, I'm n00b friendly
    • Aleksi.Kilpinen on Facebook
    • aleksi-kilpinen on LinkedIn
Re: Permissions question
« Reply #8 on: July 14, 2018, 04:31:26 AM »
Own and Any are 2 different permissions, browser should have 0 effect on permissions though. Permissions are handled serverside.
A Finnish Support Specialist
 Happily running multiple SMF 2.0 installations.

How you can help SMF

"Before you allow people access to your forum, especially in an administrative position, you must be aware that that person can seriously damage your forum.
 Therefore, you should only allow people that you trust, implicitly, to have such access." -Douglas