Sub Menu
Links Menu
Online Users

In total there are 324 users online :: 2 registered, 0 hidden and 322 guests

Most users ever online was 1091 on Wed Aug 16, 2023 5:27 pm

Registered users: Bing [Bot], Google [Bot] based on users active over the past 60 minutes

IM 1.4.1 Beta 2 forum permissions problem

This forum is purely to discuss issues with the released public betas of IntegraMOD to discuss

Moderator: Integra Moderator

IM 1.4.1 Beta 2 forum permissions problem

PostAuthor: Vadar » Thu Aug 24, 2006 8:03 pm

After a successful install and several weeks of running a test site with 1.4.1 Beta 2, all of a sudden I'm having forum permission problems.

I have followed the usual steps to set up a hidden, private, forum and attach it to a hidden usergroup. I had created a test user account that was not in the group, and sure enough the forum and group were hidden from that user.

Yesterday I invited another person who is going to work with me on development to register, and then to let me know so I could move them in to the hidden group so they could see/post in the hidden forum. Well, as soon as they registered, with no additional permissions, they could see the forum and post in it. I verified that their profile was not in the hidden group, and I even created a second test account to verify that any registered user could see and post to the "private/hidden" forum. (Non-registered could not see the forum.)

Interestingly, the first test account I created some time ago can't see this forum, but any new user who registers can.

I know that this was discussed way back in April as an issue, but short of an uninstall/reinstall I didn't see a solution. Does anyone know of a solution or is this something that was identified and fixed in the Beta 3 release?
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Vadar » Thu Aug 24, 2006 9:14 pm

This is getting stranger and stranger....

Again, I have one test user account I set up two weeks ago, and it can't see the private (hidden) forum I created.

The second test account I created tonight can see this hidden forum.

I went into the SQL database and went over the user data table line by line for both user accounts, and they are identical!

I can't see how this could happen unless something somewhere is tied to the date a user registers.....
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Vadar » Fri Aug 25, 2006 9:24 am

Well, for anyone watching this, here is an update.

I went in to the SQL database and copied over the user_regdate value for the first test user account I created (the one that works like it's supposed to) into the second test account. Doing that made the second test account work normally, so this is indeed linked to the value in the user_regdate field.

Anyone out there have an idea as to why the visibility of hidden/private/moderator/admin forums would be linked to the date value that a user registered on the forum?
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Fubie » Fri Aug 25, 2006 9:33 am

I'm not having any luck replicating your problem in RC3 and I didn't see it in RC2 altho I wasn't testing specifically for it.

I did create test users and different perm'd groups and they seemed to do what they were intended to do.

Could you try RC3 to see what results you get?
Last edited by Fubie on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http][img=left]http://www.myhorrorstories.com/files/bannerexchange.gif[/img][/url]

[url=http][img=left]http://www.fubie.net/images/geekstufflarge.jpg[/img][/url]

Fubie
Dev Team
Dev Team
 
Posts: 742
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 6:52 pm
Cash on hand: 0.00

PostAuthor: Vadar » Fri Aug 25, 2006 10:29 am

I plan on installing an RC3 test bed this weekend and I'll take a look.

The problem is, of course, that it wasn't obvious right away. It took about 2 weeks for this to come up, and it hadn't been a issue before. Since it seems to be date-related, it might go unnoticed again in RC3 for the same time period before coming up again.
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

Re: IM 1.4.1 Beta 2 forum permissions problem

PostAuthor: Vadar » Sat Aug 26, 2006 1:52 pm

Well, I installed RC3 today and copied the basic settings from my RC2 test site, and immediately had the same problem.

Here is the link to the RC3 test site: http://www.navyjrotc.us/ia/portal.php

As an unregistered user, you can go to the forums and see the "Development" category, and the forum within it called "Development ideas & discussion". You will notice that you have permissions as an unregistered visitor to post within that forum.

That forum is set up as a Moderator [Hidden] forum. Here is an image of what the set-up looks like:

[align=center:plia32kx][flash=,:plia32kx]http://www.navyjrotc.us/ia/files/iaforum.jpg[/flash:plia32kx][/align:plia32kx]

Can you think of any reason that this forum would be visible to unregistered users?
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

Re: IM 1.4.1 Beta 2 forum permissions problem

PostAuthor: Vadar » Tue Aug 29, 2006 8:22 pm

Well, with all of the security focus of the past couple of days, I went away from tracking this one. I did apply some of the very early security mods to this test site, but I then decided to leave the rest off and see what might happen. Interestingly it seems to have gone under the radar. I'd like to think that CrackerTracker played a role, but my HTTP Referres list doesn't show any google.com.tr interest in this one of my sites.

At any rate, when I decided to go back and troubleshoot some more today, the problem has disappeared! It seems to have disappeared from my RC2 test site as well. Permissions seem to work just fine now. I verified the problem was there on RC3 right after the clean install on different browsers and different computers, but it has since "gone away". Something seems to be going on related to the date value in both cases. I verified on the RC2 install when the problem was there that going in to the database and changing the user_regdate to a different date solved the problem.

When I get some time I'll create some test users and give them a user_regdate that matches the date I last saw the problem to see if I can duplicate it that way.
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Michaelo » Thu Aug 31, 2006 4:56 am

One point worth noting... When you changed the forums permissions the effect was instant on existing users but new user (user who registered after the forum permissions were changed) were not affected - yep?

It's almost like it took time for the effect to propagate through the user... a bit of a mystery... let us know if you discover anything... <img>
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

Re: IM 1.4.1 Beta 2 forum permissions problem

PostAuthor: Vadar » Thu Aug 31, 2006 10:00 pm

Did some more troubleshooting with this error tonight....

First, I went in and created a new test user. Sure enough, that test user could see the private (hidden) development forum as soon as I logged in. I then went in to the SQL database and changed the user_regdate value back to a few days prior. The next time I logged on as the test user I couldn't see the development forum (worked as it should).

Next I created a second test user and duplicated what I saw in the first step. This time I went back in to the first test user account and changed the user_regdate value back to today. Once again, changing it to today's value caused the private (hidden) development forum to be visible to the test user account again.

I am leaving both the test accounts with their current settings for 24 hours, just to see if a day later the permissions suddenly kick-in. By the way, I did do a resync and a cache delete each time I tested above just in case it was a sync or a cache problem. Neither action seem to have any effect on the outcome though. I also have the latest security fixes applied to this site, although I don't think that would have anything to do with any of this.

Anything else you can think of that I can check on this? I've set the site up to allow automatic account activation. If you want the link to take a look at it, just let me know.
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Michaelo » Fri Sep 01, 2006 7:05 am

Vadar, nice work, lets know if you find anything... If time allows I will have a look from this end.
Mike
Last edited by Michaelo on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
Kiss Portal Engine phpbbireland (status: Released)
User avatar
Michaelo
Administrator
Administrator
 
Posts: 1646
Likes: 0 post
Liked in: 0 post
Joined: Sat Mar 11, 2006 5:14 pm
Cash on hand: 0.00
Location: Dublin, Ireland

PostAuthor: Vadar » Fri Sep 01, 2006 3:59 pm

Still no difference 24 hours later.

I installed RC4, left everything as-is and simply created a private forum and assigned it to a private (hidden) group. Everything works fine (I couldn't duplicate the problem I described above.)

Now I am going to modify my RC4 site with the exact same settings as my RC3 site, testing all along the way to see if/when I can duplicate the problem. It may be something in the way I had the RC3 and RC2 sites set up. When I first tested it in RC3, I already had duplicated the settings of the RC2 site. This way, perhaps, I can find out if a particular setting is causing this problem to occur. Should have it tested by tomorrow with any luck.
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Vadar » Thu Sep 14, 2006 4:35 pm

Just another update....

So far it's been about two weeks and I haven't noticed this problem returning. Something appears to have been changed with the RC4 release, or else the anti-hacker code I copied and put in when we were having a round of trouble two weeks ago caused the problem. I haven't modified the RC4 test site in any way, and it is running nicely. For now I'm thinking this is no longer a problem.
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00

PostAuthor: Flex » Thu Sep 14, 2006 6:57 pm

RC5's out.
Last edited by Flex on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.
[url=http]My integramod site <img>[/url]

Flex
Sr Integra Member
Sr Integra Member
 
Posts: 221
Likes: 0 post
Liked in: 0 post
Joined: Sun Apr 09, 2006 3:09 pm
Cash on hand: 0.00

PostAuthor: Vadar » Thu Sep 14, 2006 8:17 pm

Yep. Saw that. It's going to be a bit of time though before I have the time to install it and run it through the same tests. Hopefully within a couple of weeks, but maybe the final product will be out by then?
Last edited by Vadar on Wed Dec 31, 1969 4:00 pm, edited 1 time in total.

Vadar
Integra Supporter
Integra Supporter
 
Posts: 68
Likes: 0 post
Liked in: 0 post
Joined: Sun Mar 26, 2006 7:30 pm
Cash on hand: 0.00


Return to IntegraMOD Public Beta

Who is online

Registered users: Bing [Bot], Google [Bot]

cron