Non-administrators cannot view forum(s)
mscdex - March 30, 2007 - 22:03
| Project: | UIE Forum |
| Version: | 4.7.x-1.x-dev |
| Component: | Miscellaneous |
| Category: | bug report |
| Priority: | critical |
| Assigned: | zoro |
| Status: | closed |
Jump to:
Description
I installed the latest (March 27, 2007) build of uieforum for 5.x on my Drupal site running 5.1 and no other users besides the site owner (me) are able to view it. I have "access forum" checked for both anonymous and authenticated users, yet neither are able to access it. It just throws an error when they try to visit the forum saying, "You are not authorized to access this page" with a header of "Access Denied."

#1
Have you granted those user groups access to the actual forums that they are trying to access?
#2
Thanks for repairing my mysql bug, but i have the same problem, users only could see the forum if i give them administer forum rights, then they could read the forum, but also adminster it :S
My security groups are still the same (i don't have changed them)
forum_access, forum_post, and forum_administer
#3
I may have a resolution. It sounds like an issue we were having. Go to admin -> site management ->uieforum and click 'edit forum' beside the forum you're having trouble accessing. There should be an 'Access Control' dropdown. Click it, and have you granted access for the 'access forum' group?
The problem seems to be that when you add a forum, the 'access contro' section on that page is empty - a forum cannot be created giving the 'access forum' permission.
#4
indeed, thanks, i hadn't saw it the first time :-)
#5
So - what's the fix? :)
Is this a coding problem? The reason all new forums dont have the access control settings set, is that alot of forums that you will create over the course of your forum life will most likely be private to a particular group, for whatever reason.
#6
Currently, when you add a new forum, the option to specify access controls isn't available *at all*. Kind of frustrating.
The solution is: after you create a forum you have to immediately go and edit it so that people can have access.
It would be nice to be able to specify access control when creating a forum, rather than having to add that extra step. To me, their absence on the 'add forum' page seems to be a coding bug rather than an intentional design feature, but I might have misjudged something.
#7
ah i see - well that's certainly not a coding bug, I never thought of putting the security fields there :)
So it's by design ;)
#8
#9
I had same problem.
I have edited the "access forum drop down" as suggested by enabling "access forum" & "post new threads"
I have also enabled in permissions for UIE...
'Authenticated users'
access forum -
post new threads -
and
'Anonymous users'
access forum -
Authenticated users can see and use the forum however anonymous users still cannot see the forum,
Access Denied message!
any ideas please ?
#10
I can't duplicate this - can you try again with the latest version of the code when it updates? (around midday I'd say)
Daniel
#11
I am having this exact problem. I don't understand how it isn't being duplicated. I've reinstalled twice, and it's the same both times. If you install the latest version of this module on a 5.1 system and create forums, they will not be visible to anonymous visitors. (Nor the block of recent posts.)
All the permissions are correctly set. No custom security groups have been created. All default, out-of-the-box (except for setting permissions so that all user levels can "access forum").
When I created a forum, I got the "Access Control" checkboxes, checking all three. Then upon editing, the checkboxes no longer appear and all I get is "No Access Controls to add for this forum." Enabling "administer forum" access for all user levels is the only thing that makes the forum visible to them, which of course is totally unacceptable.
Could you please fix this? This is absolutely critical, breaking functionality ENTIRELY for the majority of visitors. Thank you!
#12
Holy crap! I think I may have found the source of the problem. To those of you also having this problem, let me guess: You are logged in as a site Administrator--but not as the original site administrator account that was first created when Drupal was installed. Am I right?
On line 1559 of uieforum.module, you'll see the line
if($has_acc || $user->uid == 1). This happens to be inside theuieforum_form_forumfunction, which writes the form containing the "Access control" checkboxes. What it seems to do is make sure you already have administrative access to the forum via the $has_acc variable, which of course you don't have because you haven't SET it yet--so you're stuck without the ability to grant yourself permissions to the forum. Catch-22.And the reason that many people don't run into this problem is that they are logged in as the site super-admin (the admin account created when the Drupal site was first installed, with a uid of 1). Note the code
if($has_acc || $user->uid == 1)-- if you are the original site admin account, your uid will be "1" and so you will pass this "if" clause and the checkboxes will be displayed! At which point you can check all three default checkboxes, and then later log in as any old Administrator and be able to change the checkboxes at will. Anonymous users will also be able to see the forum again!So the workaround is this: Log in as the original site admin, the "super" admin as it were. Check all the checkboxes. Done!
To the module maintainers, I would request they consider changing the way this system works a bit so that all Administrators (or, more specifically, all user roles who are given "administer forum" permissions in the Drupal access control page) get to change these checkboxes. Maybe changing the if clause to something like
if($has_acc || ($user->uid == 1) || user_access('administer '.uieforum_get_module_security_name()))?#13
What I don't understand is how this is happening in the first place - on unreal.ie we don't use user "1" at all and we dont have this problem :)
#14
I am having the same problem and this is with-holding the release of my site. Unless i provide the 'administer' access to the authorized user (which is ofcourse should not be done) , the anonymous user are not able to access the forums. I would really appreciate help in this.
#15
Alright I'm not sure what the problem here is.
I've recently setup a new 5.0 site along with the latest UIEForum 5.x code and this all works perfectly. I'll give a brief explanation of how the security system works (again I stress that I _never_ use user "1")
There are 2 access pages that a site administrator needs to know about:
Within both of these, there is a second, additional step required.
Here's a brief intro to creating a new access control group for UIEForum:
If you follow all of those steps, it all should "just work" - if it doesn't, then there's a bigger problem floating around the place that I simply cannot replicate on my installations.
#16
hi zoro,
i have the same problem.
no user (anonymous user or authenticated user), except me as super-admin (uid 1), can see the uieforum.
pls let me explain the way i do:
1. download the latest drupal-source
2. install drupal as recommended
3. create a super-admin (uid 1)
4. create a new role named "admin" with all permissions
5. create another user with role "admin"
6. download the latest uieforum-source and copy uieforum-files & folders to modules/uieforum
7. logoff super-admin and login "normal" admin
8. enable uieforum-module in administer > modules
9. move uieforum from "Administer - Content management" to top of "Navigation"
10. give all uieforum-permission to the "normal" admin
11. give access & post-uieforum-permission to "authenticated user"
that's it. now create an new user, login and the uieforum isn't visible.
#17
MHelms: Your problem lays in point 9. Instead of moving from admin submenu you should create new menu entry pointing to patch: uieforum. This uieforum from administer submenu is only for admins who can edit forums.
Zoro: maybe UIEForum module should create this front-end menu entry by itself?
#18
That's certainly a possibility. I didn't actually think that the security system was that complicated though.
Drupal ---- (roles applied to forum groups) ---- UIEForum.
I'll look at it though
#19
@vito_swat: you are right. that fix my problem. thx anyway.
#20
#21
#22
I posted this as a separate topic but had no luck with any responses so thought I'd try here..
How come the "post comments without approval" in Access Control doesn't seem to have an effect with uieforum? I want it set up so that authenticated users can post comments, but they go first to the administrator for approval. Now I have set the comments module to this effect, and I tested it in the packaged Drupal forum module and it goes off to approval fine. But with UIEForum it immediately posts the reply without approval. The only settings in access control for uieforum are "access forum, administer forum and post new threads/posts.. " Where is the "post ne threads/posts with/without approval" box?
What am I missing?
Cheers,
Henry
#23
Sorry Henry, UIEForum is completely separate from Drupal in that regard :(
#24
Aha ok thanks!
Henry.
#25
Zoro,
Did you incorporate Vallenwood's fix? I was having the same trouble, and I only just installed this module last month. It was all the latest versions, as I'm a new Drupal person. I found the workaround on this issue page. This is just using the supplied three security groups without modifying them in any way, since I don't have any forums that are only for certain users.
Your step 3, Edit the forum you just created/used and apply this new group to the forum, is where it breaks down, because when you save the forum and go back in to edit it, it says No Groups To Add in that section. I have to be logged in as User 1 to see the security groups so I can select them.
I just tried it with creating a fourth security group, a new one, to add to the new forum, but it still doesn't show up for me to apply to the forum when I am logged in as a regular administrator, only when I log in as User 1.
I did not do the thing MHelms had done and move the administration page to the main menu. This is just the normal forums viewing page.
So it does appear that there's something mysterious floating around, for it not to affect you but still affect others. I hope you can sniff out the problem!
#26
Okok, I give up. I'll reinstall a clean Drupal and a clean UIEForum module and find out what on earth is going on :)
#27
Heh. Well whaddya know. It didn't work :)
I'm currently working on a major code refactoring of UIEForum, which will incorporate plenty of pretty OO code, and his change was put into my new class-based code, but I never put it into the 5.0 CVS code :) Sorry about that.
I've added it now, and will commit it as soon as I've gone through the rest of the bug reports. Sorry again for the confusion!
Daniel
#28
Hooray! Thanks! :)
#29
Sorry about that :)
#30
Automatically closed -- issue fixed for two weeks with no activity.
#31
I have the same issue as stated in the discussion. My anonymous user & authenticated user can perform admin actions (not good) like setting up forum groups and edit each others topics. I need one more little piece of the puzzel to figure this out.
How do I "Log in as the original site admin" in version 4.7 (as stated in comment #12 above)?
In Administer... Access Control, here are my settings:
uieforum module
-access forum
-----anonymous user = Y
-----authenticated user = Y
-----admin (only assigned to my node=1 profile) = Y
-administer forum
-----anonymous user = N
-----authenticated user = N
-----admin (only assigned to my node=1 profile) = Y
-post new threads/posts
-----anonymous user = N
-----authenticated user = Y
-----admin (only assigned to my node=1 profile) = Y
The main reason I used UIE Forum is because I has a simalar problem with the normal 4.7 drupal Forum not letting anonymous & authenticated users reply to an already posted comment. Sorry if this is redundent, but I didn't see a solution from the discussion above.