Bug tracker

This ticket has been moved to our new tracker. Open Ticket PHPBB3-5493 now.

Editing with test user permissions causes vanishing attachments (fix completed in vcs)

There is a bug with the "Test out user permissions" system. When using the test user permissions, one can still edit their own original post, and if the user does not have permission to view attachments on that forum, the attachments attached to the post will not be shown on the post, but still exist.

Testcase:
-------------
Note:
User A is admin
User M is normal member, without any special permissions.
Forum F has permission to disallow normal members to download attachments.
Post P is the affected post, posted with attachments.

Steps:
1. A posts a topic (with post P) with an attachment in Forum F.
2. A clicks on Test user's permission with M's permissions.
3. A goes to topic in Forum F.
4. A edits the post and saves it.
5. The attachment is now missing from the post, even after you revert to admin permissions/reedit it.

However, the attachment:
1. Is NOT listed under orphaned attachments
2. Still appears linked to the topic when checked via UCP's Manage Attachments.
3. viewforums.php still displays the attachment icon for the topic.
-------------

Manually fixing the problem:
I manually fixed it by using phpmyadmin:
1. Go to the phpbb_posts table
2. Searched for the post ID
3. Edited post_attachment value to 1 from 0.
4. Save

Comments / History

Edited ticket

Action performed by Akaru on Jul 30th 2007, 12:32

Posted by samphp on Jul 30th 2007, 18:49

is that in RC3 or RC4 or both ?

Posted by Akaru on Jul 31st 2007, 10:20

Existed in RC2, RC3. I have not been able to test it in RC4 as my board uses some mods which are not RC4 compatible yet, so I've not upgraded. It should be fairly easy to reproduce to see if RC4 is affected.

Assigned ticket to user "Acyd Burn"

Action performed by Acyd Burn (Server Manager) on Aug 24th 2007, 14:00

Changed ticket status from "New" to "Review later"

Action performed by Acyd Burn (Server Manager) on Aug 24th 2007, 14:00

Linked ticket with changeset: r8976

Action performed by Anonymous (I am too lazy to register) on Oct 6th 2008, 13:53

Changed ticket status from "Review later" to "Fix completed in SVN"

Action performed by Acyd Burn (Server Manager) on Oct 6th 2008, 13:53

Ticket details

Related SVN changesets