Account Type lost when modifying profile data

skizzo - April 5, 2007 - 15:37
Project:Account Types
Version:5.x-1.0
Component:Code
Category:bug report
Priority:normal
Assigned:rconstantine
Status:closed
Description

in user admin User A is listed with a given Account Type and Role
User A tries to modify his/her (extended) user profile
The profile data modification is ok but:
- "Invalid account type!" error msg is displayed
- "Detected malicious attempt to alter user's account type" is logged
in user admin User A is now listed as having;
- a different Account Type (namely the default one)
- no role

Note: applied profile.module_28.patch as per http://drupal.org/node/119114

#1

rconstantine - April 6, 2007 - 03:17
Assigned to:Anonymous» rconstantine

I'll check this out.

#2

rconstantine - April 6, 2007 - 04:04

I have the same problem, so I'll fix this as soon as I can. I'm not sure how I missed this before. I hope it's an easy fix :-)

It never is, though, is it?

#3

rconstantine - April 6, 2007 - 04:11

A quick look tells me that the account type association in accounttypes_users is reverted to basic, like you said, but the selectAT entry in the user's data entry of the users table is still okay. In my experience, those roles that the two account types have in common should remain, and those not allowed by basic should be extinguished.

Next time you hear from me on this, I'll have a fix uploaded. Thanks for finding this.

#4

rconstantine - April 18, 2007 - 20:43
Status:active» fixed

Should be fixed. Please check out the forthcoming release and let me know if you find anything else wrong.

I've got one more thing to look at before I make a release. Thanks for the help.

#5

Anonymous - May 2, 2007 - 20:47
Status:fixed» closed

#6

hgmichna - July 29, 2007 - 10:32

Did it have anything to do with profile.module_28.patch as per http://drupal.org/node/119114 ?

If yes, what are those (like me) supposed to do who have installed that patch? Should there be a corrected patch?

Hans-Georg

 
 

Drupal is a registered trademark of Dries Buytaert.