Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC:

Access Rights Bug 8 years 9 months ago #1386

  • Troncoso
  • Troncoso's Avatar Topic Author
Hello,

I use v 1.8.4 FREE with Joomla 1.7.3

In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público

I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.

It appears that the JooDatabase options for Data views and Form view are "hardcoded".

Is there a way to make Joodatabase "read" the Joomla Viewing Access Levels?

Thanks in advance and sorry for the English

Alfredo

Please Log in or Create an account to join the conversation.

Last edit: by joest.

Re: Access Rights Bug 8 years 9 months ago #1503

  • Midge
  • Midge's Avatar
  • Offline
  • Posts: 12
  • Thank you received: 0
we all

Troncoso wrote: In Joodatabase ACCESS RIGHTS, the options for DATA VIEWS and FORM VIEW are PUBLIC, REGISTERED, SPECIAL, even if my Joomla has the following VIEWING ACCESS LEVELS:
Especial, Miembro, Público

I already found some people has problems with access rights (as me), as it is not possible to assign FORM VIEW to ESPECIAL, MIEMBRO OR PÚBLICO.


Hello Troncoso..

Probably we all (incl. 2 other Member) have the same problem. Today I found a possible cause of the error.

In components/com_joodb/helpers/joodb.php approximately line 631 is the function:
static function checkAuthorization(&$joobase, $section="accessd") {

I think the variable must only be named "$joobase". Without "&"..
Hope this small change fixes the problem!? (At the moment I can't check it..)

Please Log in or Create an account to join the conversation.

Re: Access Rights Bug 8 years 9 months ago #1505

  • Dirk
  • Dirk's Avatar
  • Offline
  • Posts: 1185
  • Karma: 21
  • Thank you received: 224
The &$joobase is not the reason.

I add a & to passed variables because it is faster.
& means the variable is changeable by the function.
Instead of an new instance only the pointer is passed.

But there is in fact a bug in that function.
A new version will be published today.

Please Log in or Create an account to join the conversation.

Re: Access Rights Bug 8 years 9 months ago #1506

  • Midge
  • Midge's Avatar
  • Offline
  • Posts: 12
  • Thank you received: 0
Man lernt nie aus... Danke Dirk für die Erklärung und den geplanten Fix!

Please Log in or Create an account to join the conversation.

Re: Access Rights Bug 8 years 9 months ago #1508

  • Dirk
  • Dirk's Avatar
  • Offline
  • Posts: 1185
  • Karma: 21
  • Thank you received: 224
We changed the access rights behavior in PRO and FREE.
Should work now.

Be aware that the default access levels are
Public
Registered
Special

If you modify these levels and the group assignment you risk a security problem.

Please Log in or Create an account to join the conversation.

  • Page:
  • 1
Moderators: Dirkjoest