Download & Extend

IMCE Profile Access

Project:IMCE
Version:7.x-1.5
Component:User interface
Category:support request
Priority:normal
Assigned:Unassigned
Status:active

Issue Summary

When trying to edit the initial default IMCE profile, if you're not logged in as initial user (user id: 1) then you will receive an "Access is Denied" message.

AttachmentSize
IMCE_error.jpg14.48 KB

Comments

#1

I am having the same problem. And yes, I have made sure that the other profiles are not using the maintenance setup.

#2

Category:bug report» support request
Priority:major» normal

It was actually a feature where profile#1 is editable by only user#1.

#3

It was actually a feature where profile#1 is editable by only user#1.

Hi, can you kindly explain what does it mean?
WHat should I do to make the IMCE file browser usable by non admin users?
Thanks a lot

#4

It's not about allowing users to access IMCE. You can always create a new configuration profile and assign it to the user roles you like.

#5

Do you mind to state the steps clearly so that junior developer like me or rather beginner will know what to do?
Your helps is very much appreciated.

#6

i have exactly the same problem and i am not using profile-1 nor sample profile, means I did setup a dedicated profile for another role and also allocated the profile to that role. I even tried with profile-1 settings populated into this new profile, I still get the access denied error for this role.

admin can still upload images, so it should not be any server configuration and rights issue here. any more hints?

#7

Same deal here. Anyone solve this one yet?

#8

Just installed IMCE and ran into this problem...

On our site, we've got a single sign on system so really no one should ever be logged in as admin. We get by with the 'administrator' role and, in special circumstances, when I truly need uid 1, I'll work around it by using drush and/or disabling the SSO module temporarily, but it is a pain.

Maybe I'm not understanding something about how this works and why it was chosen to use admin role so specifically, but wouldn't it be better if a check was performed for the 'administrator' role instead of uid 1?

Something like this,

<?php
 
function isAdmin( $user ) {
    return
is_array($user->roles) && in_array('administrator', $user->roles);
  }
?>

I can roll a patch for this, but I'm curious if the maintainer(s) can elaborate on this feature and why it exists... is there a reason checks like these can't go based on the administrator role? Right now it feels like I'm locked out of my own site :)

nobody click here