Blog Documentation Book a Demo
Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Category Permission Confusion, Possible bug

matthewkrismatthewkris
edited March 2011 in Vanilla 2.0 - 2.8
I'm confused on how category permissions work. I'm trying to create a Staff category that only Mods and Admins can view and use.

Here is what I'm presented with:

http://i.imgur.com/6IGNN.jpg

What I am to make of this? It appears that the options are duplicated. Please help.
«1

Comments

  • matthewkrismatthewkris
    According to this page, http://vanillaforums.org/docs/managecategories, my headers are messed up and just read "Default Category".

    Is this a bug? I've not modified any core elements.
  • tjforsythetjforsythe New
    I've had that problem. They are your roles. Go to your roles config and look at the order they are listed. You should then be able to go pack to your permissions figure out which is who. After I saved it, it was correct the next time I accessed it.
  • matthewkrismatthewkris
    Yeah it looks like if I create a new category the role labels don't display properly. Once I added the category and return to edit them they appear, which now leads to a new issue. I've set them up to so that this new category is viewable only by Mods and Admins. I save it and it works fine, but when I return to edit the same category all options are restored. Another possible bug?

    All of this on 2.0.17.8 (upgraded from 2.0.17.7). No mods and or additional plug-ins.
  • jrapagejrapage New
    Beware! I had problems too when setting up a hidden 'moderator' board.

    The Roles & Permissions pages do enact the settings correctly, but if after making changes (e.g. switching 'View' off for certain groups) you go back and look at the permissions again, the page defaults the View column to 'on' even if in the database the setting is off.

    This is a @bug in the way the Roles & Permissions page renders, ignoring the true state of the board.

    I've found dozens of these niggles with Vanilla 2. The amount of formal testing this software goes through seems woefully inadequate. It's a shame because the design is fantastic.
  • LincLinc Admin
    @matthewkris Yes, this is a filed issue on GitHub. Sorry for the confusion.

    @jrapage You're saying the boxes re-check themselves but the permissions apply correctly?
  • matthewkrismatthewkris
    My boxes also recheck themselves.
  • LincLinc Admin
    OK, but can you say whether the permission apply?
  • matthewkrismatthewkris
    Yes they do apply.
  • LincLinc Admin
    @Mark you have a couple important bugs in the new categories here.
  • jrapagejrapage New
    @Lincoln yes, I verified by monitoring the database entries. It's simply an issue of the page ignoring the actual settings and populating the 'View' (checked) regardless. It's annoying but not a show stopper, unless of course you have secret-squirrel Categories and accidentally forget to uncheck them all every time :)
  • barnsybarnsy New
    Am so glad that someone else has encountered this category permissions problem, as I thought I was the only one.

    @mark On the topic of 'secret-squirrel' categories, I've noticed that I can succesfully set up a category that only Mods and Admins can see, post, view etc (despite the permissions confusion above). However, every comment that is posted in a thread under the 'secret-squirrel' category shows up in the Mods' and Admins' 'Activity' log - for *everyone* to see.

    For me this is a show-stopper, and is preventing me from upgrading from Vanilla 1 to Vanilla 2.

    @matthewkris - can you confirm this unexpected behaviour on your forum?

  • barnsybarnsy New
    edited March 2011
    @jrapage - how about you? Do you also notice that the comments in the 'hidden' moderator board aren't so hidden afterall and can be seen by everyone (including non-Mods) in the 'Activity' log?

    If anyone has a solution to hide this Activity, or turn off Activity completely, please do let me know.

    Thanks
  • jrapagejrapage New
    @barnsy - yes, you have to implement the code fix from the branch that @Lincoln stated above.
  • AlbertAlbert
    edited March 2011
    @barnsy
    I have the same problem...

    http://vanillaforums.org/discussion/14828/profile-permission-problem-viewing-comments#Item_2
  • matthewkrismatthewkris
    Wow! All of my private category posts are available to the public under the user activity. This is a HUGE deal and I've since had to delete the entire category as it contains stuff private to our staff. Great...

    This is a critical bug and a patch should be released ASAP.

    I am seriously one more huge bug away from tossing Vanilla.

    @barnsy confirmed. :(
  • lucluc ✭✭
    Wow! All of my private category posts are available to the public under the user activity. This is a HUGE deal and I've since had to delete the entire category as it contains stuff private to our staff. Great...

    This is a critical bug and a patch should be released ASAP.

    I am seriously one more huge bug away from tossing Vanilla.

    @barnsy confirmed. :(
    I think this one is what's fixed by this:
    https://github.com/vanillaforums/Garden/commit/bfe5fbae87ef7b0521297b9afacf115648bdf688
  • matthewkrismatthewkris
    @luc Thanks.

    While I'm able to patch it myself, this seems like something that should be put out there in a point release.
  • lucluc ✭✭
    Indeed, let me know if it fixes it for you.
    If so, I'll patch mine myself too tonight when back from work :)
  • AlbertAlbert
    Patch work for me :-)

    I'm really happy now :-D
  • jrapagejrapage New
    Seems there still may be security holes with private boards in the Activity feed.

    I just got a bunch of email notifications about threads on this subject, but they are mysteriously missing from here now. Seems a member got banned and maybe his question got nuked. Not cool?

    http://vanillaforums.org/discussion/comment/147376#Comment_147376
Sign In or Register to comment.