News module permission error!

"Brian Lindner" <[email protected]> Sun, 8 Sep 2002 17:08:28 -0400
Newsgroups gmane.comp.web.envolution.devel
Message-ID <000001c2577b$e43b9860$6501a8c0@Gohan>
I was doing some permission setup on my site and I noticed that the
permissions for the News (Stories) module have changed
 
the old style was:   [ Stories:: ]  [ Author name:Category name:Story ID
]
 
the new news related perm names are now according to the system: (from
the components popup window listing)
 

Stories::Category
Category name::Category ID

Stories::Story
Author name:Category name:Story ID

Storiesblock::
Block title::
 
so.. check your permissions in your db if you have any security on the
news module
 
 
ALSO .. in   News/index.php  their is a bug with its permission
checking... it is still using the old Stories::   perm check
 
line 158 reads:
        // February 19, 2002 -- Rabbitt (aka Carl P. Corliss) -- Added
Topics permission check
        if (pnSecAuthAction(0, 'Stories::Story',
"$info[aid]:$info[cattitle]:$info[sid]", ACCESS_OVERVIEW) &&
            pnSecAuthAction(0, 'Stories::Category',
"$info[cattitle]::$info[catid]", ACCESS_OVERVIEW) &&
            pnSecAuthAction(0,
'Topics::Topic',"$info[topicname]::$info[tid]",ACCESS_OVERVIEW)) {
 
 
it should be changed for the New perm names to:
        // February 19, 2002 -- Rabbitt (aka Carl P. Corliss) -- Added
Topics permission check
        // Sept 8, 2002 -- Furbo (Brian Lindner) -- added
Stories::Category check and Stories::Story fix
        if (pnSecAuthAction(0, 'Stories::Story',
"$info[aid]:$info[cattitle]:$info[sid]", ACCESS_OVERVIEW) &&
            pnSecAuthAction(0, 'Stories::Category',
"$info[cattitle]::$info[catid]", ACCESS_OVERVIEW) &&
            pnSecAuthAction(0,
'Topics::Topic',"$info[topicname]::$info[tid]",ACCESS_OVERVIEW)) {

it will now use the NEW  story perm name settings
 
 
rememeber... change any old permissions (in db) you have for  Stories::
to   Stories::Story too
 
 
let me know if anyone has any problems with this
Furbo