Project

General

Profile

Actions

Bug #3310

closed

Permissions check of single user while administrator fails

Added by krileon about 12 years ago. Updated almost 12 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Target version:
Start date:
28 February 2012
Due date:
% Done:

100%

Estimated time:
5:00 h

Description

The permissions check in get_users_permission fails in part due to $user_id not being defined and the gids check appears to also fail. Issue isn't present if user performing the action is a super user.


Files

3310-p1.patch (705 Bytes) 3310-p1.patch krileon, 28 February 2012 20:01
3310-p2.patch (3.07 KB) 3310-p2.patch krileon, 28 February 2012 20:01
cb.acl.php (36.1 KB) cb.acl.php krileon, 28 February 2012 20:02
cb.tables.php (68.7 KB) cb.tables.php krileon, 28 February 2012 20:02

Related issues 2 (0 open2 closed)

Has duplicate CB - Bug #3313: CB User Manager does not have same permissions as Joomla User ManagerRejected04 March 2012

Actions
Has duplicate CB - Bug #3312: CB 1.8 / J251 Notice when creating new backend userRejected04 March 2012

Actions
Actions #1

Updated by krileon about 12 years ago

  • Subject changed from get_users_permission checks if user_id is self when not an array and var isn't defined to Permissions check of single user while administrator fails
  • Status changed from Resolved to Assigned
  • Assignee changed from beat to krileon
  • % Done changed from 100 to 50
Actions #3

Updated by krileon about 12 years ago

  • File deleted (cb.acl.php.patch)
Actions #4

Updated by krileon about 12 years ago

Resolved permissions issue, but then the below error becomes apparent.

Warning: array_diff() [function.array-diff]: Argument #1 is not an array in administrator/components/com_comprofiler/library/cb/cb.tables.php on line 151

It's due to $oldUserComplete->gids being null instead of an array for a new user.

Updated by krileon about 12 years ago

$oldUserComplete is established in saveSafely, but no check is made to ensure gids is an array. Implemented changing of gids from null to array to prevent errors when directly establishing a new moscomprofilerUser then directly calling saveSafely.

Updated by krileon about 12 years ago

Added pre-patched CB 1.8 Stable files for those needing immediate resolution (and further testing of patches). Those wanting to test simply copy, paste, and replace to the following location.

administrator/components/com_comprofiler/library/cb/

Actions #7

Updated by beat about 12 years ago

  • Target version set to CB 1.8.1
Actions #8

Updated by krileon almost 12 years ago

  • Priority changed from Normal to Urgent
Actions #9

Updated by beat almost 12 years ago

  • Status changed from Resolved to Closed
  • Estimated time set to 5:00 h

r1803 commits this: testing required.

To Test:
- Try performing CB tasks in backend under various permissions settings.

Actions

Also available in: Atom PDF