News module permission error!
"Brian Lindner" <[email protected]> Sun, 8 Sep 2002 17:08:28 -0400
| Newsgroups | gmane.comp.web.envolution.devel |
|---|---|
| Message-ID | <000001c2577b$e43b9860$6501a8c0@Gohan> |
I was doing some permission setup on my site and I noticed that the
permissions for the News (Stories) module have changed
the old style was: [ Stories:: ] [ Author name:Category name:Story ID
]
the new news related perm names are now according to the system: (from
the components popup window listing)
Stories::Category
Category name::Category ID
Stories::Story
Author name:Category name:Story ID
Storiesblock::
Block title::
so.. check your permissions in your db if you have any security on the
news module
ALSO .. in News/index.php their is a bug with its permission
checking... it is still using the old Stories:: perm check
line 158 reads:
// February 19, 2002 -- Rabbitt (aka Carl P. Corliss) -- Added
Topics permission check
if (pnSecAuthAction(0, 'Stories::Story',
"$info[aid]:$info[cattitle]:$info[sid]", ACCESS_OVERVIEW) &&
pnSecAuthAction(0, 'Stories::Category',
"$info[cattitle]::$info[catid]", ACCESS_OVERVIEW) &&
pnSecAuthAction(0,
'Topics::Topic',"$info[topicname]::$info[tid]",ACCESS_OVERVIEW)) {
it should be changed for the New perm names to:
// February 19, 2002 -- Rabbitt (aka Carl P. Corliss) -- Added
Topics permission check
// Sept 8, 2002 -- Furbo (Brian Lindner) -- added
Stories::Category check and Stories::Story fix
if (pnSecAuthAction(0, 'Stories::Story',
"$info[aid]:$info[cattitle]:$info[sid]", ACCESS_OVERVIEW) &&
pnSecAuthAction(0, 'Stories::Category',
"$info[cattitle]::$info[catid]", ACCESS_OVERVIEW) &&
pnSecAuthAction(0,
'Topics::Topic',"$info[topicname]::$info[tid]",ACCESS_OVERVIEW)) {
it will now use the NEW story perm name settings
rememeber... change any old permissions (in db) you have for Stories::
to Stories::Story too
let me know if anyone has any problems with this
Furbo