Access Rights Bug
- Troncoso
- Topic Author
11 years 3 months ago - 11 years 2 months ago #1386
by Troncoso
Access Rights Bug was created by Troncoso
Hello,
I use v 1.8.4 FREE with Joomla 1.7.3
In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público
I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.
It appears that the JooDatabase options for Data views and Form view are "hardcoded".
Is there a way to make Joodatabase "read" the Joomla Viewing Access Levels?
Thanks in advance and sorry for the English
Alfredo
I use v 1.8.4 FREE with Joomla 1.7.3
In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público
I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.
It appears that the JooDatabase options for Data views and Form view are "hardcoded".
Is there a way to make Joodatabase "read" the Joomla Viewing Access Levels?
Thanks in advance and sorry for the English
Alfredo
Last edit: 11 years 2 months ago by joest.
Please Log in to join the conversation.
- Midge
- Offline
Less
More
- Posts: 12
- Thank you received: 0
11 years 2 months ago #1503
by Midge
Replied by Midge on topic Re: Access Rights Bug
we all
Hello Troncoso..
Probably we all (incl. 2 other Member) have the same problem. Today I found a possible cause of the error.
In components/com_joodb/helpers/joodb.php approximately line 631 is the function:
I think the variable must only be named "$joobase". Without "&"..
Hope this small change fixes the problem!? (At the moment I can't check it..)
Troncoso wrote: In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público
I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.
Hello Troncoso..
Probably we all (incl. 2 other Member) have the same problem. Today I found a possible cause of the error.
In components/com_joodb/helpers/joodb.php approximately line 631 is the function:
static function checkAuthorization(&$joobase, $section="accessd") {
I think the variable must only be named "$joobase". Without "&"..
Hope this small change fixes the problem!? (At the moment I can't check it..)
Please Log in to join the conversation.
- Dirk
- Offline
Less
More
- Posts: 1222
- Thank you received: 225
11 years 2 months ago #1505
by Dirk
Replied by Dirk on topic Re: Access Rights Bug
The &$joobase is not the reason.
I add a & to passed variables because it is faster.
& means the variable is changeable by the function.
Instead of an new instance only the pointer is passed.
But there is in fact a bug in that function.
A new version will be published today.
I add a & to passed variables because it is faster.
& means the variable is changeable by the function.
Instead of an new instance only the pointer is passed.
But there is in fact a bug in that function.
A new version will be published today.
Please Log in to join the conversation.
- Midge
- Offline
Less
More
- Posts: 12
- Thank you received: 0
11 years 2 months ago #1506
by Midge
Replied by Midge on topic Re: Access Rights Bug
Man lernt nie aus... Danke Dirk für die Erklärung und den geplanten Fix!
Please Log in to join the conversation.
- Dirk
- Offline
Less
More
- Posts: 1222
- Thank you received: 225
11 years 2 months ago #1508
by Dirk
Replied by Dirk on topic Re: Access Rights Bug
We changed the access rights behavior in PRO and FREE.
Should work now.
Be aware that the default access levels are
Public
Registered
Special
If you modify these levels and the group assignment you risk a security problem.
Should work now.
Be aware that the default access levels are
Public
Registered
Special
If you modify these levels and the group assignment you risk a security problem.
Please Log in to join the conversation.
Moderators: Dirk, joest