539136 - Permission denied to a user that has tiki_p_admin (full perms)

Status: RESOLVED WORKSFORME

(support.mozilla.org :: Knowledge Base Software, task)

Description

[Marc Laporte]

user: "marclaporte" is part of group "System Admins", thus, has tiki_p_admin and should be able to do everything.

Yet,

http://tiki-trunk.mozilla.com/tiki-galleries.php
Permission denied you can not view this section 

http://tiki-trunk.mozilla.com/tiki-browse_categories.php
Permission denied

But otherwise, can access admin pages such as:
http://tiki-trunk.mozilla.com/tiki-admin.php

Comment 1

[Laura Thomson :laura]

LPH, can you take a look at this one?

Comment 2

[Louis-Philippe Huberdeau]

My user account does not have admin rights, so that makes it a little hard to test. (account: lphuberdeau)

Comment 3

[Laura Thomson :laura]

I see you as being in the System Admins group, can you confirm?

Comment 4

[Louis-Philippe Huberdeau]

Either it was added in the mean time or I confused with an other issue.

I was able to reproduce on tiki-trunk.m.o but not on my local installation. 

All of the code setting-up permissions is located in lib/setup/perms.php. Technically, anyone with tiki_p_admin globally should be granted access to anything no matter what happens as the check has priority over any other rule.

In order to debug, I would look at the content of $groupList to make sure the right set is found and $permissionList to see if the global variable being checked is also set.

A test for $globalperms->admin might also be an indication.

Comment 5

[Paul Craciunoiu [:paulc]]

This worked for me. Steps I took:
1. Created user: test123
2. Logged in with my previous admin account (pcraciunoiu) and granted test123 admin rights (assigned to group "System Admins").
3. Logged in with test123 and visited tiki-admin.php and other links from comment 0.

Am I missing something? LPH: can you still reproduce?

Comment 6

[Louis-Philippe Huberdeau]

Seems to work now. However, no fixes AFAIK. Might be one of those random cache/session issues.

Comment 7

[Paul Craciunoiu [:paulc]]

Marking WFM. We'll just keep an eye out.