Author |
Message |
Doulos
Life Cycles Becoming CPU Cycles

Joined: Jun 06, 2005
Posts: 732
|
Posted:
Thu Jan 13, 2011 1:21 pm |
|
I have a forum with many posts accumulated over about 4+ years. This site began as RN76 (I believe) and has been upgraded regularly when updates became available. NukeSentinel also has been kept up to date (except maybe IP2Country stuff).
The problem is that a former admin to the site still has access to all the private forums even though he is not in any of the permissions:
1. removed as site admin - verified.
2. Forum admin - User permissions all are not "Disallowed access" - verified.
3. Groups - user is not in any of the groups - verified.
4. A test user with no access to the private forums shows the exact same permissions as the above user, but cannot access, or see, private forums
I have verified, using NS IP tracking, that the user is using his own account and that he is able to access the private forums - including site administrator-only forums.
This would not be a problem since I trust this user implicitly and only removed his permissions at his request, but there are other admins that if I decide to remove their permissions I do not want them to be able to access private forums.
Any suggestions? |
|
|
|
 |
PHrEEkie
Subject Matter Expert

Joined: Feb 23, 2004
Posts: 358
|
Posted:
Thu Jan 13, 2011 2:00 pm |
|
phpBB has individual permissions that supercede Group permissions. Check to make sure there isn't anything set in there. Again, this is Forums Admin, User Admin (way down bottom of left nav), Permissions.
If you can't find anything Individual, Group, or Moderator, you might want to have a pro go in and look at it... might be something very wrong.
- Keith |
_________________ PHP - Breaking your legacy scripts one build at a time. |
|
|
 |
Doulos

|
Posted:
Thu Jan 13, 2011 3:23 pm |
|
Doulos wrote: |
2. Forum admin - User permissions all are not "Disallowed access" - verified.
|
Thanks for your reply. I also verified that the user in question has all the same settings in the database as my "test user".
I will keep the Pro suggestion in reserve.
Other suggestions? |
|
|
|
 |
PHrEEkie

|
Posted:
Thu Jan 13, 2011 6:29 pm |
|
'NOT' disallowed access? They should be disallowed. The allowance should happen at the group level for any private forums, and disallowed at the individual level.
- Keith |
|
|
|
 |
Palbin
Site Admin

Joined: Mar 30, 2006
Posts: 2583
Location: Pittsburgh, Pennsylvania
|
Posted:
Thu Jan 13, 2011 6:41 pm |
|
Doulos wrote: | 2. Forum admin - User permissions all are not "Disallowed access" - verified.
|
Just so I understand correctly you checked his user permissions and ALSO removed him as an admin? |
_________________ "Debugging is twice as hard as writing the code in the first place. Therefore, if you write the code as cleverly as possible, you are, by definition, not smart enough to debug it." — Brian W. Kernighan. |
|
|
 |
Doulos

|
Posted:
Thu Jan 13, 2011 9:01 pm |
|
PHrEEkie wrote: | 'NOT' disallowed access? They should be disallowed. The allowance should happen at the group level for any private forums, and disallowed at the individual level.
- Keith |
Duh. You gotta be kidding me. Wow, guess I need to read more carefully, or not do this stuff at the end of a 14 hour work day.
Thanks. |
|
|
|
 |
PHrEEkie

|
Posted:
Thu Jan 13, 2011 10:46 pm |
|
Doulos wrote: | Duh. You gotta be kidding me. Wow, guess I need to read more carefully, or not do this stuff at the end of a 14 hour work day.
Thanks. |
np mate.. we've all had those days.. many times
We just don't post most of 'em, so they 'never happened'. hehe
cheers |
|
|
|
 |
Doulos

|
Posted:
Fri Jan 14, 2011 1:15 pm |
|
Didn't those used to say "Allowed" and "Not Allowed"? |
|
|
|
 |
|