Warning: The author of this contribution does not provide support for it anymore.

Custom Header Logo

ACP accessible after installing the mod - Custom Header Logo

ACP accessible after installing the mod

by MarcB » Sun Dec 02, 2012 10:07 am

Just noticed when using "Test out user's permissions" that after the implementation of this MOD that All Registered Users have access to the ACP regarding the MOD settings, see below.
The board I use is running phpBB v3.0.11. The mod installed is the latest one v1.2.7.

Any idea why or how to adjust?



ACP_CHI_TITLE
----------------------------------------------
ACP_CHI_SETTINGS_TITLE
ACP_CHI_FORUMS_TITLE
ACP_CHI_PAGES_TITLE


{ ACP_CHI_TITLE }
Here you can configure various basic settings for the Custom Header Images MOD.

{ ACP_CHI_TITLE }Enable Custom Header Images? Ja Nee
Enable Custom Header Images for guests? Ja Nee
If a logo/header background is defined, use it for subforums too? Ja Nee
Last edited by MarcB on Thu Dec 06, 2012 8:23 pm
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: URGENT: ACP accessible after installing the mod by EVERY

by Balint » Sun Dec 02, 2012 10:57 am

Hi Marc,

sorry, I can't reproduce this - if a user is not in the admin group, all direct access to the /adm/ part of the forum is rerouted to the forum itself. Could you please provide the exact URL of your case and maybe a test account?

Regards,
Bálint
User avatar
Balint
Registered User
Posts: 952
Joined: Tue Aug 06, 2002 2:19 pm
Location: Germany
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by MarcB » Sun Dec 02, 2012 11:32 am

Hi Bálint,

Thanks for your quick reply. I just did an in detail test by using actual accounts of our members. With these accounts, I logged on to our forum and it appeared that they do NOT have access to the ACP which is a relieve.

However, when using the "Test out user's permissions" option with my account as administrator to test the permissions of our members, you do get access. This is very confusing.

Next to that, our moderators do have access to the ACP as described in the initial posting which they should not have. I have created an account for you with the same permissions for testing.

Account details have been send by email.
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by Balint » Sun Dec 02, 2012 12:56 pm

Thanks for the fast details and the account. I may have found the culprit, because in my test forum everything seems fine. Could you please check, if the setting found in the following link may be enabled in your forum for moderators and registered users groups? (Of course you have to check in the "Group permissions" part)

http://startrekguide.com/community/view ... 62&t=18170
User avatar
Balint
Registered User
Posts: 952
Joined: Tue Aug 06, 2002 2:19 pm
Location: Germany
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by MarcB » Sun Dec 02, 2012 6:45 pm

I cannot open the screen dump on the startrekguide.com site. Can you guide me where to look?
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by Balint » Sun Dec 02, 2012 7:05 pm

Go to your Administration, then to PERMISSIONS --> Groups' permissions --> Choose "Registered Users" --> Administrator permissions (dropdown) and look for "Can manage modules" under the "Misc" tab.
User avatar
Balint
Registered User
Posts: 952
Joined: Tue Aug 06, 2002 2:19 pm
Location: Germany
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by MarcB » Sun Dec 02, 2012 8:15 pm

Thanks for the update, "Can manage modules" is set to "No", see screen dump.

Image
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by Balint » Sun Dec 02, 2012 8:46 pm

Maybe there's a "Yes" elsewhere. Please refer to this guide: https://www.phpbb.com/kb/article/phpbb3 ... ons/#MASKS

OR: where you posted this screen: set a "Never"
User avatar
Balint
Registered User
Posts: 952
Joined: Tue Aug 06, 2002 2:19 pm
Location: Germany
Contact:

Re: ACP accessible after installing the mod by EVERYBODY

by MarcB » Sun Dec 02, 2012 9:09 pm

Ok, I will check and let you know!
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: ACP accessible after installing the mod

by MarcB » Thu Dec 06, 2012 8:39 pm

I have found what is causing this problem. There is a direct relation with the installation of Tapatalk (http://www.tapatalk.com).

After the installation of the Tapatalk Plugin v3.5.0, I found in the ACP that users in the "Global Moderators" group that can be found under "PERMISSIONS" -> "GLOBAL PERMISSIONS" -> "Global Moderators", automatically become a member of the group "Administrators" that can be found under "PERMISSIONS"-> "GLOBAL PERMISSIONS" -> "Administrators".

As a result, these users are able to login to the ACP and will be able to View under "GENERAL" -> "Board Statistics". And to View and Change under ".MODS" -> "CUSTOM HEADER IMAGES" (Basic settings / Forums & categories logo assignment / Custom page logo assignment). But also to View and Change under ".MODS" -> "TAPATALK" (Tapatalk Settings).

To overcome this problem, I tried to remove these users of the group "Administrators" that can be found under "PERMISSIONS"-> "GLOBAL PERMISSIONS" -> "Administrators". However, this is NOT possible. Why this is not possible, I do not know (yet).

I have posted this issue at the Tapatalk forum, see http://support.tapatalk.com/threads/tap ... ors.15881/
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact:

Re: ACP accessible after installing the mod

by Balint » Fri Dec 07, 2012 7:29 am

So this means you should ask for support in the tapatalk forums and my MOD is not responsible for the described error. :-)
User avatar
Balint
Registered User
Posts: 952
Joined: Tue Aug 06, 2002 2:19 pm
Location: Germany
Contact:

Re: ACP accessible after installing the mod

by MarcB » Fri Dec 07, 2012 8:50 am

Balint wrote:So this means you should ask for support in the tapatalk forums and my MOD is not responsible for the described error. :-)


Yes, this is correct :D

As I could not find out why the ACP was accessible, I did a complete installation of our board on our development site including all mods. With each step, I verified the ACP accessibility. By doing so, I found that there is a direct relation between the Global Moderators group and the installation of Tapatalk v3.5.0 which opens the ACP. Next to that, it appeared that the phpBB option "Test out user's permission" also has a bug as it "looks" that the ACP becomes accessible but if you create a test account and use this account to verify if you can really access the ACP, it will show that this is not possible.

All in all, a lot of confusion and initially it looked that the error was caused by the Custom Header Logo mod but this is definitely NOT the case. I can reproduce the error with the installation of Tapatalk and already raised a topic on their support forum.

Thanks for your help!
User avatar
MarcB
Registered User
Posts: 138
Joined: Sun Jun 14, 2009 2:48 pm
Location: Netherlands
Contact: