I just installed userpoints on a large website. Anyway, upon enabling user role, each use that did anything was granted ALL roles available. Thankfully I did NOT leave my desk and an email saying that I had been granted a new role alerted me....

So PLEASE PLEASE fix this. I had more than 10 users in less than 5 minutes granted full control of my website.

thank you
Leo

Comments

jredding’s picture

jredding commented
Priority: Critical » Normal
Status: Active » Postponed (maintainer needs more info)

Before you jump to conclusion that something is actually wrong with the code can you please post your configuration of userpoints_role?

Did you set it so that 0 points are needed to join the role of admin?

While this is a critical error to YOU, this module is in use on the sites of others w/o this error so please post more information.

Although this is needless to say, you should NEVER, NEVER EVER.. NEVER EVER EVER install a module on a production site without first installing, testing and fully understanding the use of a module on a test site.

mcfly-1’s picture

mcfly-1 commented

No need to be defensive, I am only trying to help with the development of this module, and also implement something useful on my website. I am only reporting what happened to my installation. I didn't set anything, everything came by default as 0 points to join the next level.

The configuration for user_points is the default one. All transactions are approved by default. I changed the branding of "points". And the default values for each action are left there.

Leo

jredding’s picture

jredding commented

Sorry that my response seemed so defensive it wasn't meant to be. I was trying to get the point across that you're the first one to have reported this issue and your post included no information on how to reproduce it. At this point I can't verify that this is actually a problem. Additionally I'm not sure if anyone is around to fix this.

Have you simply changed the point values to appropriate values (i.e. not 0). I'll have to check with the original author, this project's maintainer (kbahey) and other to see if this "bug" is actually a feature. Having roles change at 0, in some cases, could actually desired (for example, sites that grant negative points).

I dunno....

If other know could they post here? If the original author is still around could you respond as to if this is a bug or not?

mcfly-1’s picture

mcfly-1 commented

Thank you. I will wait to see if others manifest. Upon installation, all roles' threshold were set to 0 by default. In my mind, I thought this meant: "users will not be swtiched to this role if set to 0". So I left it alone, as I was still defining thresholds and "user ranks".

best
Leo

mcfly-1’s picture

mcfly-1 commented

Actually I just saw the .module itself and found this:

Points required to join each role. Enter 0 to ignore that role.'

This substantiates what I thought, and at least on my website the value of 0 was ignored.

thanks
Leo

jredding’s picture

jredding commented
Project: User Points » User Points Contributed modules
Version: 5.x-2.14 » 5.x-2.x-dev
arsart’s picture

arsart commented
Priority: Normal » Critical
Status: Postponed (maintainer needs more info) » Active

I have same issue on a preproduction site, so have two ways to ignore this bug: to set very high earn points for roles or to remove all roles that I don't want to be in use for points.
:(

kbahey’s picture

kbahey commented
Priority: Critical » Normal

Critical for you does not mean critical for others.

The bug will be fixed when someone submits a working patch, or sponsors the effort for working on it.

esllou’s picture

esllou commented

I also using user role contrib. module and I don't see this. I have two roles set at "0" in the settings and when I created a new member, this new member is not given any extra privileges. Maybe because I use Usernodes which are created automatically and get each new member 2 points immediately, so they're never actually on zero points ever. Maybe that's a way around this until a patch is released?

kbahey’s picture

kbahey commented
Version: 5.x-2.x-dev » 5.x-3.x-dev
Status: Active » Closed (duplicate)

Duplicate of http://drupal.org/node/254285