Menu settings has appeared...

tchurch - November 3, 2009 - 11:12
Project:Storm
Version:6.x-1.26
Component:Miscellaneous
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed
Description

Suddenly for non-admin users (users without "administer menus") they can see "Menu settings" on all storm items.

#1

Magnity - November 3, 2009 - 11:21

Which permissions does the user have?

#2

tchurch - November 3, 2009 - 14:33

I haven't changed any permissions since I upgraded Storm to 1.26 but suddenly it now appears.

The users in question have several roles. Here are the permissions from the database for their roles:

Storm: access dashboard,
Storm expense: access,
Storm expense: add,
Storm expense: delete own,
Storm expense: edit own,
Storm expense: view own,
Storm note: access,
Storm note: add,
Storm note: delete own,
Storm note: edit own,
Storm note: view own,
Storm organization: view belonged,
Storm person: edit when linked to own user account,
Storm person: view of user organization,
Storm person: view own,
Storm person: view when linked to own user account,
Storm project: access,
Storm project: view if assigned to project,
Storm project: view if project manager,
Storm project: view of user organization,
Storm task: access,
Storm task: edit own,
Storm task: view of user organization,
Storm task: view own,
Storm timetracking: access,
Storm timetracking: add,
Storm timetracking: view own
post comments without approval,
edit field_person_address,
edit field_person_dob,
edit field_person_marital_status,
edit field_person_phone,
edit field_person_postcode,
edit field_person_sex,
edit field_person_type,
edit field_task_assigned,
edit field_time_confirmed,
edit field_tt_person,
view field_person_address,
view field_person_dob,
view field_person_marital_status,
view field_person_phone,
view field_person_postcode,
view field_person_sex,
view field_person_tax_code,
view field_person_type,
view field_sia_number,
view field_task_assigned,
view field_time_confirmed,
view field_tt_invoiced,
view field_tt_person,
view field_tt_staff_paid,
Storm: access dashboard,
Storm expense: access,
Storm expense: add,
Storm expense: edit own,
Storm expense: view of user organization,
Storm note: access,
Storm note: add,
Storm note: edit of user organization,
Storm note: edit own,
Storm note: view of user organization,
Storm note: view own,
Storm organization: access,
Storm organization: associate user,
Storm organization: view belonged,
Storm organization: view own,
Storm person: access,
Storm person: view of user organization,
Storm person: view own,
Storm project: access,
Storm project: add,
Storm project: edit of user organization,
Storm project: edit own,
Storm project: view of user organization,
Storm project: view own,
Storm task: access,
Storm task: add,
Storm task: delete own,
Storm task: edit of user organization,
Storm task: edit own,
Storm task: view of user organization,
Storm task: view own,
Storm timetracking: access,
Storm timetracking: add,
Storm timetracking: view of user organization,
Storm timetracking: view own,
subscribe to content,
subscribe to content types,
subscribe to taxonomy terms,
upload files,
view uploaded files
post comments without approval,
edit field_ni_number,
edit field_person_address,
edit field_person_dob,
edit field_person_hourly_rate,
edit field_person_marital_status,
edit field_person_phone,
edit field_person_postcode,
edit field_person_sex,
edit field_person_tax_code,
edit field_person_type,
edit field_sia_number,
edit field_task_assigned,
edit field_time_confirmed,
edit field_tt_person,
view field_ni_number,
view field_person_address,
view field_person_dob,
view field_person_hourly_rate,
view field_person_marital_status,
view field_person_phone,
view field_person_postcode,
view field_person_sex,
view field_person_tax_code,
view field_person_type,
view field_sia_number,
view field_task_assigned,
view field_time_confirmed,
view field_tt_invoiced,
view field_tt_person,
view field_tt_staff_paid,
administer forums,
administer menu,
access content,
edit any framing_order content,
edit any framing_order_item content,
edit own framing_order content,
edit own framing_order_item content,
view revisions,
Storm: access administration pages,
Storm: access dashboard,
Storm attribute: access,
Storm expense: access,
Storm expense: add,
Storm expense: delete of user organization,
Storm expense: delete own,
Storm expense: edit of user organization,
Storm expense: edit own,
Storm expense: view of user organization,
Storm expense: view own,
Storm note: access,
Storm note: add,
Storm note: edit of user organization,
Storm note: edit own,
Storm note: view of user organization,
Storm note: view own,
Storm organization: access,
Storm organization: associate user,
Storm organization: view all,
Storm organization: view belonged,
Storm organization: view own,
Storm person: access,
Storm person: add,
Storm person: edit all,
Storm person: edit of user organization,
Storm person: edit own,
Storm person: view all,
Storm person: view of user organization,
Storm person: view own,
Storm project: access,
Storm project: add,
Storm project: delete of user organization,
Storm project: delete own,
Storm project: edit all,
Storm project: edit of user organization,
Storm project: edit own,
Storm project: view all,
Storm project: view of user organization,
Storm project: view own,
Storm task: access,
Storm task: add,
Storm task: delete of user organization,
Storm task: delete own,
Storm task: edit all,
Storm task: edit of user organization,
Storm task: edit own,
Storm task: view all,
Storm task: view of user organization,
Storm task: view own,
Storm timetracking: access,
Storm timetracking: add,
Storm timetracking: edit own,
Storm timetracking: view all,
Storm timetracking: view of user organization,
Storm timetracking: view own,
subscribe to content,
subscribe to content types,
subscribe to taxonomy terms,
access administration pages,
access site reports,
access system information,
upload files,
view uploaded files
post comments without approval,
edit field_hmrc_question,
edit field_ni_number,
edit field_person_address,
edit field_person_dob,
edit field_person_hourly_rate,
edit field_person_marital_status,
edit field_person_phone,
edit field_person_postcode,
edit field_person_sex,
edit field_person_tax_code,
edit field_person_type,
edit field_sia_number,
edit field_task_assigned,
edit field_time_confirmed,
edit field_tt_person,
view field_hmrc_question,
view field_ni_number,
view field_person_address,
view field_person_dob,
view field_person_hourly_rate,
view field_person_marital_status,
view field_person_phone,
view field_person_postcode,
view field_person_sex,
view field_person_tax_code,
view field_person_type,
view field_sia_number,
view field_task_assigned,
view field_time_confirmed,
view field_tt_invoiced,
view field_tt_person,
view field_tt_staff_paid,
view revisions,
Storm: access dashboard,
Storm expense: access,
Storm expense: add,
Storm expense: delete of user organization,
Storm expense: delete own,
Storm expense: edit of user organization,
Storm expense: edit own,
Storm expense: view of user organization,
Storm expense: view own,
Storm note: access,
Storm note: add,
Storm note: delete of user organization,
Storm note: delete own,
Storm note: edit of user organization,
Storm note: edit own,
Storm note: view of user organization,
Storm note: view own,
Storm organization: view belonged,
Storm person: access,
Storm person: add,
Storm person: edit of user organization,
Storm person: edit own,
Storm person: edit when linked to own user account,
Storm person: view of user organization,
Storm person: view own,
Storm person: view when linked to own user account,
Storm project: access,
Storm project: add,
Storm project: delete of user organization,
Storm project: delete own,
Storm project: edit if assigned to project,
Storm project: edit if project manager,
Storm project: edit of user organization,
Storm project: edit own,
Storm project: view of user organization,
Storm project: view own,
Storm task: access,
Storm task: add,
Storm task: edit of user organization,
Storm task: edit own,
Storm task: view of user organization,
Storm task: view own,
Storm timetracking: access,
Storm timetracking: add,
Storm timetracking: view of user organization,
Storm timetracking: view own,
subscribe to content,
subscribe to content types,
subscribe to taxonomy terms,
upload files,
view uploaded files
edit field_tt_person,
view field_tt_person,
view field_tt_staff_paid,
Storm note: access,
Storm note: view own,
Storm organization: view belonged,
Storm person: access,
Storm person: view own,
Storm person: view when linked to own user account,
Storm project: view of user organization,
Storm project: view own,
Storm task: view of user organization,
Storm task: view own,
Storm timetracking: view own

#3

Magnity - November 3, 2009 - 18:59

Thanks - and to confirm:

The menu settings are appearing on ALL storm node's add/edit forms?
Are they appearing on any other node add/edit forms?

#4

tchurch - November 3, 2009 - 21:02

Yes (I have it showing on pages and forum topic too now).

#5

Magnity - November 3, 2009 - 21:08

In that case, I suspect this is not caused by Storm, as Storm doesn't change anything on nodes that it doesn't create.

Was the Storm upgrade definitely the only change made to the site in this time?

I presume you ran update.php after upgrading Storm. Did any other modules perform updates at this time? (perhaps from previous updates?)

Do you have a backup of the site with the previous version? If so, could you test that to ensure all is correct there?

#6

tchurch - November 4, 2009 - 08:42

I don't have a backup of the site (it's live so couldn't really roll back anyway).

I did run the update.php. To my knowledge, the only update was Storm.
It's a bit difficult looking into things like permissions at the moment because of my memory problem (other issue).

I do have a test system with the same Storm version (different permissions and some extra modules) which seems to not have this problem.
I'll try and get some more information, if you need it.

#7

tchurch - November 4, 2009 - 08:56

I found it. My fault.

Looking closer at the permissions list I had "administer menu" given to a role which the users had.
When I removed it, it was OK.

Sorry for wasting time. Should have looked close myself.

#8

Magnity - November 4, 2009 - 09:06
Status:active» fixed

Alls well that ends well!

Though backups are strongly advised...

#9

System Message - November 18, 2009 - 09:10
Status:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.

 
 

Drupal is a registered trademark of Dries Buytaert.