By netbjarne on

Oh my, this is not good. And I can't figure out whats wrong. There are 4 permissions related to the user module:

- access user profiles
- administer access control
- administer users
- change own username

I have given Anonumous users the "access user profiles" permission, but still anonymous gets "page not found" when trying to view a user profile. Only if I give anonumous user the "administer users" permission, they are allowed to view a user profile. And edit it - which I obviously am not interested in...

Help!

Bjarne

Sample node with problem: http://friskole.oldrup.dk/user/12
Drupal used: 4.7.3

⋅ Categories: Drupal 4.7.x

Comments

netbjarne’s picture

netbjarne commented

The anonymous user can view some user profiles, but not others - (weep)

Take a look at http://friskole.oldrup.dk/foraeldre

As an anonymous user, I am able to view the first profile (man on rope) but not the other (man eating susage)

I have checked their url'aliases and there both perfectly right.

Any help greatly appreciated.

netbjarne’s picture

netbjarne commented

For details see http://drupal.org/node/84490

Bjarne

doka’s picture

doka commented

There is a checkbox in every user config pages (http://www.example.com/?q=user/xxx/edit), just the last one at the bottom of the page, and the administrator or the user itself has to tick it, in order to let others to view his/her profil page. Otherwise only the admins can see it.

An other issue is, if the user has never logged in, this method still won't work for non admins.

But if the relevant checkbox has been set, the user has been logged in, and the visitor has got the "access user profiles" privilege, it should works.

Doka

Doka

jeff veit’s picture

jeff veit commented

I also found this problem.

It turns out it's quite sensible in most cases. The code checks to see whether someone has logged in once an account has been created. Users who create accounts without ever logging do not have their profiles shown.

There are a couple of problems with this:
1. Admin created accounts are also not accessed until later.
2. The profile listing shows accounts that have been created but not accessed.

See http://drupal.org/node/84490 for further details.

You can get around this problem by editing the database directly, and setting a value for the access field that isn't zero.

Smoothie

ledelboy’s picture

ledelboy commented

I just did an upgrade from 4.6 to 4.7.3
Not even user 1 can see the list of users. Just the page numbers at the bottom
Users can't access their accounts, unless they are able to administer users. It doesn't matter if they have created their accounts or accounts are created by an admin. Even users created after the upgrade are in the exact same case.
Only user with administer users permissions can see profiles
What database should I edit? Access? I tried and didn't work.

netrom’s picture

netrom commented

I also had the issue with the error message "page not found" on all pages. The error occured only when I logged in as an ordinary user/member and NOT when I logged in as administrator.

This led to my first conclusion: It has to be about permissions! So, I went through all permission settings and checked every field that was necessary. That solved part of the problem. Now I could acces all pages as an ordinary member EXCEPT all the edit related tabs in the profile acount. These still gave me the error message.

After comprehensive investigation I found out that the problem was the userfriendly urls. So I disabled the path-module and related modules. And then all pages worked as intended.

Now I just have to work out a solution to get my userfriendly urls back without bugs. But the site is running as it should.

As described, in my case it had nothing to do with code, scripts, core-bugs or anything like that. But simply settings.

Maybe this is not the case for you but I just wanted to share this perspective too.

regards, Morten