Hello,

since I updated to 6.x-3.4, users with a certain role can not access any images any more.

(not images uploaded via FileField, but images inserted in common pages)

When I deactivate the FileField Module, everything is ok. Before the Update it was ok as well.

As I have to solve this very quickly:

1. how can I downgrade the Module? Just upload the older version? (6.x.3.2 worked well)

2. what could be the reason or the solution for the described problem?

Thank you, regards

Adriana

Comments

quicksketch’s picture

quicksketch
he/him
commented

I can't tell what the problem is on your site from the information you've given. I can say that FileField doesn't exhibit this behavior when used by itself, it could be that a 3rd party module is no longer working correctly. If downgrading, yes just replace the filefield module with the previous version. There is a database change in filefield_meta, but it shouldn't cause you any harm since it's just a new column that will be left empty on new inserts.

mikolaskova’s picture

mikolaskova commented

Thank you very much. I changed to ..3.2 again and everything works as before. How could I find out- which module is not working correctly with the new (3.5) FileField-Version? I'm using Taxonomy Access for Access Control- could the new Version have any side effect on this module?

quicksketch’s picture

quicksketch
he/him
commented

So far the only module I know that has a problem is Lightbox 2. See #831774: Fix for missing argument error after upgrading to Filefield 6.x-3.5.

mikolaskova’s picture

mikolaskova commented

Thank you- but I don't use Lightbox 2.
I now tried to re-upload the images to the same directory again, than it works with Filefield 6.x-3.5 .
But as I can't re-upload all Images on the Website, I have to stay with Filefield 6.x-3.3 .

Any hints for how to make the images visible with the newest version would help me very much.

quicksketch’s picture

quicksketch
he/him
commented

You might also check that your permissions are correct if you're using the "Content permissions" module, which provides per-field access control. If you don't want to hide specific fields, you can try turning off that module entirely. If using that module, double-check the permissions under admin/user/permissions.

mikolaskova’s picture

mikolaskova commented

I checked all these permissions-settings, I don't uses per-field access control.

Maybe with following informations, there could be a solution:

With the new FileField-Version, in some cases, f.e. for anonymous Users, the image-files, that were not uploaded via either FileField, IMCE or another Upload-Modul, are not shown (permission denied, the link in the html-code is correct). These are the images, that are not stored in the database (file-table).

I have seen, that the FileField's hook_download-funktion has been modified quite a lot. When I replace the _download-hook with the older version, everything works as usual.
Are the changes in the _download-funktion important for security reasons? If not, I would just replace this funktion in my case...

Thank you anyway

Adriana

(Should I move this question in a new thread? It's not really concerning downgrading anymore...)

dbeheydt’s picture

dbeheydt commented

Hello,
Me too, I have problems with the latest release of this module: when trying to upload a file as non-admin user, the throbber keeps on spinning and the upload doesn't happen.
I checked all permissions and they are set ok. When checking watchdog I see an "Access denied": filefield/ahah/document/field_file/0
Downgrading "fixed" the problem but leaves with a site with a security-risk.

TyraelTLK’s picture

TyraelTLK commented

For me the problem was backup and migrate 1.3:
http://drupal.org/node/832910

quicksketch’s picture

quicksketch
he/him
commented
Category: task » support
Status: Active » Closed (fixed)