FUDforum: Bug Reports » every user can delete/modify all posts, edit/delete permission set to "no"

Home » FUDforum Development » Bug Reports » every user can delete/modify all posts, edit/delete permission set to "no"

Show: Today's Messages :: Polls :: Message Navigator

every user can delete/modify all posts, edit/delete permission set to "no" [message #21651]

Wed, 08 December 2004 13:49

skurfuerst

Messages: 5
Registered: December 2004

Karma: 0

Junior Member

Hi,
I wanted to convert my phpbb to fudforum, and the currently converted fudforum can be found here: http://www.had-community.de/fudforum . The problem is that all users can delete and modify whichever postings they want, they kind of have moderator privileges in every forum and every user has that.
Feel free to create a user and try it out yourself... The forum is curently not in use.

When looking at the permission system, the columns "edit" and "delete" are set to NO everywhere, for every forum and for the global options.

I have no other idea where to look... It really seems to be strange.

I didn't find anything about this bug in the Forum, (maybe its a misconfiguration), but it didnt strengthen my beliefs in fudforum Sad

Sad

. Hopefully all will work out fine and we will find the error Smile

Smile

Thank you,
Sebastian

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21652 is a reply to message #21651]

Wed, 08 December 2004 14:06

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

The error is likely in the conversion process. Check and see if those users have admin or moderator bit set.

Also check if there are any "special" groups that were created granting those priveleges.

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21654 is a reply to message #21651]

Wed, 08 December 2004 14:14

skurfuerst

Messages: 5
Registered: December 2004

Karma: 0

Junior Member

Hi,
there are no special groups (at least I don't see any in the groups manager)...
The error also happens when creating new users... So it doesnt seem to be a "user-option", rather a default option... i just don't know where the error is.
If you have any ideas / need admin access to have a look, please tell me.

Sebastian

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21655 is a reply to message #21654]

Wed, 08 December 2004 14:32

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

IM me the admin access to the forum and I'll take a look.

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #21656 is a reply to message #21651]

Wed, 08 December 2004 16:02

skurfuerst

Messages: 5
Registered: December 2004

Karma: 0

Junior Member

Thank you @all so much. This support is awesome!!

Keep up the great work,
Sebastian

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23750 is a reply to message #21651]

Mon, 28 March 2005 06:13

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

I used the phpbb2 converter in CVS and ran into the same problem, even for anonymous users. I went into Group Manager --> Manage users and changed the rights back for each forum.

I assume that was all that needed to be done to correct this security issue?

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23752 is a reply to message #23750]

Mon, 28 March 2005 13:53

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

That's correct.

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23778 is a reply to message #23752]

Mon, 28 March 2005 21:16

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

I think I found another problem related to this since a fresh copy of 2.6.12 does not have this problem.

For some reason no matter what I do on the FudForum that I used the phpBB converter, no one and that includes admins can vote in polls. Even if I grant complete access to create/vote and if I create a new poll it does not register your vote.

After hitting submit it does not register the vote and brings you back to the main menu.

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23779 is a reply to message #21651]

Mon, 28 March 2005 21:25

JamesS

Messages: 275
Registered: July 2002
Location: Atlanta, GA

Karma: 0

Senior Member

This thread is troubling me. I have been contemplating migrating a phpbb v2.0.11 board over to FUDforum using the converter.

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23781 is a reply to message #23778]

Mon, 28 March 2005 23:23

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

Have you tried running the consistency checker?

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23782 is a reply to message #23781]

Mon, 28 March 2005 23:41

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

Yes, several times.

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23783 is a reply to message #23782]

Mon, 28 March 2005 23:49

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

Are you sure you don't have any all encompasing groups that were created by the import process? I think you may have some of those...

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23784 is a reply to message #21651]

Tue, 29 March 2005 01:03

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

I never setup any groups. It does not make a sense since the few forums I have area all set to enable voting/create polls and global users are set the same.

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23785 is a reply to message #23784]

Tue, 29 March 2005 02:21

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

What groups do you have?

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23786 is a reply to message #23785]

Tue, 29 March 2005 05:25

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

Just the default it creates

Global anonymous
Global registered

and the ones it creates for each forum

forum1
forum2
forum3

I decided it was not worth the bother anyway and started a fresh database without using the phpBB converter this time. The polls work fine as long as I do not use the converter.

btw - I still have the converted database and forum available if you want me to troubleshoot it in case someone else runs into the same problem with the converter.

[Updated on: Tue, 29 March 2005 06:20]

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23788 is a reply to message #23786]

Tue, 29 March 2005 14:02

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

Go ahead and send me a copy of the converted database and I'll take a look @ the situation.

FUDforum Core Developer

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #23799 is a reply to message #21651]

Wed, 30 March 2005 00:28

mrock

Messages: 28
Registered: March 2005

Karma: 0

Junior Member

Just as a test I created a new phpbb2 board and a new Fudforum board and used phpBB2 converter. It worked just fine.

Sorry, I thought I had a second backup when I did a another test by transfering that same phpBB2 data to the corrupted Fudforum. This time around the polls worked after the transfer even after changing user rights.

If it comes up again I will send it to you.

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #31720 is a reply to message #21651]

Mon, 15 May 2006 03:23

James.Chacko

Messages: 2
Registered: May 2006
Location: Dubai, United Arab Emirat...

Karma: 0

Junior Member

Hi guys,

Sorry for pulling up such an old post, but I really need your help.

I just started a wesite based on egroupware and installed FUDForums on it. First of all let me say thank you for such a cool application and all the neat features it contains.

Now my problem is that even after going through all the settings and making sure that they are all right, the users seem to have the moderator options (move/delete) enabled!!

I am the only moderator for every forum. Since the site has just been started we did not get the chance of voting for moderators. Anyways I noticed a wierd thing, when I disable my moderator option, that is there are no moderators for any forum, then all users do not have the moderator option, but if I make myself the moderator again, they get the option!!

I would really appreciate it if somebody could help me out here. Ilia, you seemed to have solved our friends problem here, but I dont seem to understand how you got round to it!!

Ok this is getting even more wierd. I just checked something else. I notice that when I log in as another user and try to post a message it says that I am posting the message, it is not showing the actual users name, why is that? I think that's why when I am the moderator they all become the moderator. Somehow every user is loaded as me!!

Thanks,

Cheers,
James Chacko

[Updated on: Mon, 15 May 2006 03:43]

Report message to a moderator

Re: every user can delete/modify all posts, edit/delete permission set to "no" [message #31725 is a reply to message #31720]

Mon, 15 May 2006 11:12

James.Chacko

Messages: 2
Registered: May 2006
Location: Dubai, United Arab Emirat...

Karma: 0

Junior Member

Thanks guys, but I seem to have fixed it. eGroupware was not clearing the sessions when the person logged out and so even though I used a different login, it was seeing the session as mine and gave me my rights.

Cheers,
James

Report message to a moderator

Previous Topic:	Avatar uploading - missed extensions
Next Topic:	Include in footer of the RC1

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Nov 22 17:28:11 GMT 2024

Total time taken to generate the page: 0.02203 seconds