Access Rights Bug

  • Troncoso
11 years 3 months ago - 11 years 2 months ago #1386 by Troncoso
Access Rights Bug was created by Troncoso
Hello,

I use v 1.8.4 FREE with Joomla 1.7.3

In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público

I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.

It appears that the JooDatabase options for Data views and Form view are "hardcoded".

Is there a way to make Joodatabase "read" the Joomla Viewing Access Levels?

Thanks in advance and sorry for the English

Alfredo
Last edit: 11 years 2 months ago by joest.

Please Log in to join the conversation.

More
11 years 2 months ago #1503 by Midge
Replied by Midge on topic Re: Access Rights Bug
we all

Troncoso wrote: In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público

I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.


Hello Troncoso..

Probably we all (incl. 2 other Member) have the same problem. Today I found a possible cause of the error.

In components/com_joodb/helpers/joodb.php approximately line 631 is the function:
static function checkAuthorization(&$joobase, $section="accessd") {

I think the variable must only be named "$joobase". Without "&"..
Hope this small change fixes the problem!? (At the moment I can't check it..)

Please Log in to join the conversation.

More
11 years 2 months ago #1505 by Dirk
Replied by Dirk on topic Re: Access Rights Bug
The &$joobase is not the reason.

I add a & to passed variables because it is faster.
& means the variable is changeable by the function.
Instead of an new instance only the pointer is passed.

But there is in fact a bug in that function.
A new version will be published today.

Please Log in to join the conversation.

More
11 years 2 months ago #1506 by Midge
Replied by Midge on topic Re: Access Rights Bug
Man lernt nie aus... Danke Dirk für die Erklärung und den geplanten Fix!

Please Log in to join the conversation.

More
11 years 2 months ago #1508 by Dirk
Replied by Dirk on topic Re: Access Rights Bug
We changed the access rights behavior in PRO and FREE.
Should work now.

Be aware that the default access levels are
Public
Registered
Special

If you modify these levels and the group assignment you risk a security problem.

Please Log in to join the conversation.

Moderators: Dirkjoest