FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » every user can delete/modify all posts, edit/delete permission set to "no"
Show: Today's Messages :: Polls :: Message Navigator
Switch to threaded view of this topic Create a new topic Submit Reply
every user can delete/modify all posts, edit/delete permission set to "no" [message #21651] Wed, 08 December 2004 13:49 Go to next message
skurfuerst is currently offline  skurfuerst   Germany
Messages: 5
Registered: December 2004
Karma: 0
Junior Member
Hi,
I wanted to convert my phpbb to fudforum, and the currently converted fudforum can be found here: http://www.had-community.de/fudforum . The problem is that all users can delete and modify whichever postings they want, they kind of have moderator privileges in every forum and every user has that.
Feel free to create a user and try it out yourself... The forum is curently not in use.

When looking at the permission system, the columns "edit" and "delete" are set to NO everywhere, for every forum and for the global options.

I have no other idea where to look... It really seems to be strange.

I didn't find anything about this bug in the Forum, (maybe its a misconfiguration), but it didnt strengthen my beliefs in fudforum Sad . Hopefully all will work out fine and we will find the error Smile

Thank you,
Sebastian
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21652 is a reply to message #21651] Wed, 08 December 2004 14:06 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
The error is likely in the conversion process. Check and see if those users have admin or moderator bit set.

Also check if there are any "special" groups that were created granting those priveleges.


FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21654 is a reply to message #21651] Wed, 08 December 2004 14:14 Go to previous messageGo to next message
skurfuerst is currently offline  skurfuerst   Germany
Messages: 5
Registered: December 2004
Karma: 0
Junior Member
Hi,
there are no special groups (at least I don't see any in the groups manager)...
The error also happens when creating new users... So it doesnt seem to be a "user-option", rather a default option... i just don't know where the error is.
If you have any ideas / need admin access to have a look, please tell me.

Sebastian
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21655 is a reply to message #21654] Wed, 08 December 2004 14:32 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
IM me the admin access to the forum and I'll take a look.

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21656 is a reply to message #21651] Wed, 08 December 2004 16:02 Go to previous messageGo to next message
skurfuerst is currently offline  skurfuerst   Germany
Messages: 5
Registered: December 2004
Karma: 0
Junior Member
Thank you @all so much. This support is awesome!!

Keep up the great work,
Sebastian
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23750 is a reply to message #21651] Mon, 28 March 2005 06:13 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
I used the phpbb2 converter in CVS and ran into the same problem, even for anonymous users. I went into Group Manager --> Manage users and changed the rights back for each forum.

I assume that was all that needed to be done to correct this security issue?
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23752 is a reply to message #23750] Mon, 28 March 2005 13:53 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
That's correct.

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23778 is a reply to message #23752] Mon, 28 March 2005 21:16 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
I think I found another problem related to this since a fresh copy of 2.6.12 does not have this problem.

For some reason no matter what I do on the FudForum that I used the phpBB converter, no one and that includes admins can vote in polls. Even if I grant complete access to create/vote and if I create a new poll it does not register your vote.

After hitting submit it does not register the vote and brings you back to the main menu.

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23779 is a reply to message #21651] Mon, 28 March 2005 21:25 Go to previous messageGo to next message
JamesS is currently offline  JamesS   United States
Messages: 275
Registered: July 2002
Location: Atlanta, GA
Karma: 0
Senior Member
This thread is troubling me. I have been contemplating migrating a phpbb v2.0.11 board over to FUDforum using the converter.
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23781 is a reply to message #23778] Mon, 28 March 2005 23:23 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
Have you tried running the consistency checker?

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23782 is a reply to message #23781] Mon, 28 March 2005 23:41 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
Yes, several times.
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23783 is a reply to message #23782] Mon, 28 March 2005 23:49 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
Are you sure you don't have any all encompasing groups that were created by the import process? I think you may have some of those...

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23784 is a reply to message #21651] Tue, 29 March 2005 01:03 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
I never setup any groups. It does not make a sense since the few forums I have area all set to enable voting/create polls and global users are set the same.



Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23785 is a reply to message #23784] Tue, 29 March 2005 02:21 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
What groups do you have?

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23786 is a reply to message #23785] Tue, 29 March 2005 05:25 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
Just the default it creates

Global anonymous
Global registered

and the ones it creates for each forum

forum1
forum2
forum3

I decided it was not worth the bother anyway and started a fresh database without using the phpBB converter this time. The polls work fine as long as I do not use the converter.

btw - I still have the converted database and forum available if you want me to troubleshoot it in case someone else runs into the same problem with the converter.

[Updated on: Tue, 29 March 2005 06:20]

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23788 is a reply to message #23786] Tue, 29 March 2005 14:02 Go to previous messageGo to next message
Ilia is currently offline  Ilia   Canada
Messages: 13241
Registered: January 2002
Karma: 0
Senior Member
Administrator
Core Developer
Go ahead and send me a copy of the converted database and I'll take a look @ the situation.

FUDforum Core Developer
Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23799 is a reply to message #21651] Wed, 30 March 2005 00:28 Go to previous messageGo to next message
mrock is currently offline  mrock   United States
Messages: 28
Registered: March 2005
Karma: 0
Junior Member
Just as a test I created a new phpbb2 board and a new Fudforum board and used phpBB2 converter. It worked just fine.

Sorry, I thought I had a second backup when I did a another test by transfering that same phpBB2 data to the corrupted Fudforum. This time around the polls worked after the transfer even after changing user rights.

If it comes up again I will send it to you.

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #31720 is a reply to message #21651] Mon, 15 May 2006 03:23 Go to previous messageGo to next message
James.Chacko is currently offline  James.Chacko   United Arab Emirates
Messages: 2
Registered: May 2006
Location: Dubai, United Arab Emirat...
Karma: 0
Junior Member

Hi guys,

Sorry for pulling up such an old post, but I really need your help.

I just started a wesite based on egroupware and installed FUDForums on it. First of all let me say thank you for such a cool application and all the neat features it contains.

Now my problem is that even after going through all the settings and making sure that they are all right, the users seem to have the moderator options (move/delete) enabled!!

I am the only moderator for every forum. Since the site has just been started we did not get the chance of voting for moderators. Anyways I noticed a wierd thing, when I disable my moderator option, that is there are no moderators for any forum, then all users do not have the moderator option, but if I make myself the moderator again, they get the option!!

I would really appreciate it if somebody could help me out here. Ilia, you seemed to have solved our friends problem here, but I dont seem to understand how you got round to it!!

Ok this is getting even more wierd. I just checked something else. I notice that when I log in as another user and try to post a message it says that I am posting the message, it is not showing the actual users name, why is that? I think that's why when I am the moderator they all become the moderator. Somehow every user is loaded as me!!


Thanks,

Cheers,
James Chacko

[Updated on: Mon, 15 May 2006 03:43]

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #31725 is a reply to message #31720] Mon, 15 May 2006 11:12 Go to previous message
James.Chacko is currently offline  James.Chacko   United Arab Emirates
Messages: 2
Registered: May 2006
Location: Dubai, United Arab Emirat...
Karma: 0
Junior Member

Thanks guys, but I seem to have fixed it. eGroupware was not clearing the sessions when the person logged out and so even though I used a different login, it was seeing the session as mine and gave me my rights.

Cheers,
James
  Switch to threaded view of this topic Create a new topic Submit Reply
Previous Topic: Avatar uploading - missed extensions
Next Topic: Include in footer of the RC1
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Fri Nov 22 18:08:19 GMT 2024

Total time taken to generate the page: 0.02305 seconds