Page 1 of 1

3.7.5 Permission Issue

Posted: Wed Sep 06, 2017 8:08 pm
by mrtawny
Since updating to 3.7.5 I am experiencing the following issue in that when I create a new article or category the permissions are as expected for the Administrator group (an all other groups) before saving, but when saved all permissions (except the Super User group) are set to "Not Allowed (Inherited)".

All articles and categories created before the 3.7.5 upgrade are as expected. I have double checked the Global Configuration >> Permission and all is as expected there too.

Am I missing something obvious or is there a bug in 3.7.5?

Nigel

Re: 3.7.5 Permission Issue

Posted: Wed Sep 06, 2017 8:25 pm
by Webdongle
Are you talking about the editing Permissions of the Article ?

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 5:45 am
by mrtawny
I am talking about all permissions that would ordinarily be allowed by inheritance. Edit, create, delete, etc. They are all changed from Allowed (Inherited) to Disallowed (Inherited) when the article / category is saved. Regards

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 7:12 am
by Per Yngve Berg
As the permissions are inherited, you will get the permissions of the parent category. When the category change, the permissions will change.

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 8:42 am
by Webdongle
mrtawny wrote:I am talking about all permissions that would ordinarily be allowed by inheritance. Edit, create, delete, etc. ...
But for what ? Article or Category ?
Default Article Permissions (for each User Group) are inherited from the Category
Default Category Permissions (for each User Group) are inherited from it's Parent Category (if there is one) then Global.
The Default settings (for each User Group) that you are seeing are set somewhere in that 'chain of command'.

Either you (or another Super Admin) altered the Permissions for User Group(s) or you have a 3rd party extension that is doing it.

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 9:44 am
by mrtawny
All permission in both categories and articles are being set to Not Allowed (Inherited) in all groups, except the Super User group, when a new category / article is saved. Updating existing categories / articles does not change the permission settings when saved.

I have not adjusted any permissions anywhere in the hierarchy chain (as I am the only Super User) and only noticed this behaviour since updating to 3.7.5

I clearly need to investigate further to see if any extension updates have caused this. Very confusing all the same.

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 9:59 am
by mrtawny
I move all my suspect categories and articles into Uncategorised - checked permissions - all as expected - good!

I then moved them back to the original categories - rechecked permission - all as expected - which is bizarre but good!

What just happened I am not too sure, but it all seems to be working as expected now. Many thanks for the comments and tips.

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 10:10 am
by Per Yngve Berg
You may have some errors in the ACL table (multiple roots and orphaned entries).

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 1:18 pm
by Webdongle
PM me a Super Admin login and I will look see if it is a bug.

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 2:33 pm
by mrtawny
I managed to move all my troublesome categories and article into "Uncategorised", saved them, moved them back to the desired category, saved again and all seems to be fine now - I guess the database got a bit confused.

Webdongle, I would need to setup a separate Super User for you to do this as my site one has 2FA running. As I am now up and running do you still need to do this?

Thanks everyone for your input

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 2:36 pm
by mrtawny
Additionally, I am not old enough or popular enough to use PM on this forum

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 5:33 pm
by Webdongle
Not now I know it was PEBKAC not a bug

Re: 3.7.5 Permission Issue

Posted: Thu Sep 07, 2017 5:45 pm
by leolam
Webdongle wrote:Not now I know it was PEBKAC not a bug
I am not native so what is that?

Leo 8)