User group not updating (until after logout)

[westonian]

Hi

I'm trying to create the following usergroup structure

- Public
- Registered
- Super Registered
- Special

The only difference between the stock-standard setup is that Super Registered users would have access to a couple of Menu Items that the normal Registered users would not.

Setting up the new User Group seems to be fine, but when I assign a user to the Super Registered group through the back-end, the Super User can't see the new menu items until he/she logs out and then logs back in.

It's as though the browser needs to refresh the permissions.

Can anyone advise/guide me on how to setup such a group. It should be simple and I don't want to force the user to log-out. Do I set the "Super User's" parent group to "Public"?

[stutteringp0et]

This is because the user groups and access levels are added to their session data when they log in. These values persist throughout their session.

[westonian]

That makes sense.

So let's say the user group change during a session through either two methods:

1 - the user's group was upgraded by an Admin through the bakend, or
2 - Hyperthetically, the user click an "upgrade me" button that ran a small script to change the group

Both would fail until the user logged in again, right?

[stutteringp0et]

Yup, but there is a complicated way to do it.

If you take a close look at my EU e-Privacy Directive extension (the Joomla 2.5 version) you'll see a method for doing it live - but it requires the server run PHP 5.3 and have the Reflection classes included.

[BeyondWEB]

See this topic:

http://forum.joomla.org/viewtopic.php?f=579&t=670217

[ihtus]

this worked for me (found here http://forum.joomla.org/viewtopic.php?p=2725238)

Code: Select all

	/libraries/joomla/user/user.php
	
find:
		if (empty($this->_authLevels))
		{
			$this->_authLevels = JAccess::getAuthorisedViewLevels($this->id);
		}

replace with:
		if (empty($this->_authLevels)
			|| $this->_authLevels != JAccess::getAuthorisedViewLevels($this->id)
		)
		{
			$this->_authLevels = JAccess::getAuthorisedViewLevels($this->id);
		}