From: Arjen v. B. <boc...@fe...> - 2009-04-04 09:24:24
|
Could anyone explain to me how the group administrator is supposed to work? Here's what I did: - Fresh install of phpESP v2.1.2. - copied phpESP.ini.php.example to phpESP.ini.php - changed db vars and base_url to match my setup - Logged in as root - Created a new group 'nescog' - Created a designer with membership of group 'nescog' and all options set to 'Yes' except disabled I supposed that the designer with group-edit capabilities should be able to add additional designers, but when I log in as the group- editor I get the following message: "This account does not have permission to access this group" Is there something I am missing? Arjen |
From: Jonathan H. <jr...@dm...> - 2009-04-04 12:28:33
|
I had the same problem and opened a bug report, #2138508. This was swiftly closed with the resolution 'invalid'. Jonathan On 4 Apr 2009, at 10:24, Arjen van Bochoven wrote: > Could anyone explain to me how the group administrator is supposed to > work? Here's what I did: > > - Fresh install of phpESP v2.1.2. > - copied phpESP.ini.php.example to phpESP.ini.php > - changed db vars and base_url to match my setup > - Logged in as root > - Created a new group 'nescog' > - Created a designer with membership of group 'nescog' and all options > set to 'Yes' except disabled > > I supposed that the designer with group-edit capabilities should be > able to add additional designers, but when I log in as the group- > editor I get the following message: > "This account does not have permission to access this group" > > Is there something I am missing? > |
From: Franky V. L. <lie...@te...> - 2009-04-04 12:48:49
|
That doesn't seem like it was the intention. I've made a comment about that in the ticket, reopened it and will take a look at it. Franky On Sat, 4 Apr 2009 12:59:23 +0100 Jonathan Hughes <jr...@dm...> wrote: > I had the same problem and opened a bug report, #2138508. > This was swiftly closed with the resolution 'invalid'. > > Jonathan > > On 4 Apr 2009, at 10:24, Arjen van Bochoven wrote: > > > Could anyone explain to me how the group administrator is supposed > > to work? Here's what I did: > > > > - Fresh install of phpESP v2.1.2. > > - copied phpESP.ini.php.example to phpESP.ini.php > > - changed db vars and base_url to match my setup > > - Logged in as root > > - Created a new group 'nescog' > > - Created a designer with membership of group 'nescog' and all > > options set to 'Yes' except disabled > > > > I supposed that the designer with group-edit capabilities should be > > able to add additional designers, but when I log in as the group- > > editor I get the following message: > > "This account does not have permission to access this group" > > > > Is there something I am missing? > > > > ------------------------------------------------------------------------------ > _______________________________________________ > phpESP-general mailing list > php...@li... > https://lists.sourceforge.net/lists/listinfo/phpesp-general > |
From: Arjen v. B. <boc...@fe...> - 2009-04-04 21:06:54
|
Ok, I found the bug: I guess in order to prepare for a mysql query, the variable containing the group is padded with quotes. This causes the check for the group to fail. To fix it, edit admin/include/where/admdesigner.inc on line 155 replace in_array($r, $_SESSION['acl']['pgroup']) || with in_array(trim($r, "'"), $_SESSION['acl']['pgroup']) || Adding designers should be fine after that. cheers, Arjen On 4 apr 2009, at 11:24, Arjen van Bochoven wrote: > Could anyone explain to me how the group administrator is supposed to > work? Here's what I did: > > - Fresh install of phpESP v2.1.2. > - copied phpESP.ini.php.example to phpESP.ini.php > - changed db vars and base_url to match my setup > - Logged in as root > - Created a new group 'nescog' > - Created a designer with membership of group 'nescog' and all options > set to 'Yes' except disabled > > I supposed that the designer with group-edit capabilities should be > able to add additional designers, but when I log in as the group- > editor I get the following message: > "This account does not have permission to access this group" > > Is there something I am missing? > > Arjen > > ------------------------------------------------------------------------------ > _______________________________________________ > phpESP-general mailing list > php...@li... > https://lists.sourceforge.net/lists/listinfo/phpesp-general |
From: Franky V. L. <lie...@te...> - 2009-04-05 08:17:54
|
On Sat, 4 Apr 2009 23:06:23 +0200 Arjen van Bochoven <boc...@fe...> wrote: > Ok, I found the bug: > > I guess in order to prepare for a mysql query, the variable > containing the group is padded with quotes. This causes the check for > the group to fail. > > To fix it, edit admin/include/where/admdesigner.inc > on line 155 replace > in_array($r, $_SESSION['acl']['pgroup']) || > with > in_array(trim($r, "'"), $_SESSION['acl']['pgroup']) || > > Adding designers should be fine after that. > > cheers, > > Arjen Hmmm ... the in_array function is called in multiple places with the same $r variable. Shouldn't they all be changed then? I've committed a fix for this to svn. Franky |