Skip to main content

This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

Archive /

Our old forums are still available as a read-only archive.

Moderators: martimiz, Sean, biapar, Willr, Ingo, simon_w

Permissions error on Images tab


Reply


6 Posts   1815 Views

Avatar
Howard

Community Member, 215 Posts

22 May 2008 at 4:18pm

Edited: 22/05/2008 4:53pm

I have added a new page type that includes an images tab so that the client can upload or select an already uploaded pic to associate with that page. However when I am logged in as client whenever I click on the "Images" tab it logs me out of the CMS asthough I don't have permission to see that. If I gve the client group full admin rights or if I am logged in as admin then there is no issue.

I am not keen on leaving them with full admin rights but wonder if there is a way to fix it?

SS 2.2.2rc5

Avatar
Howard

Community Member, 215 Posts

22 May 2008 at 4:54pm

I have uploaded a screenshot to show you what the issue looks like - kinda odd

Avatar
vstrazz

Community Member, 63 Posts

28 June 2008 at 8:14am

Edited: 28/06/2008 8:16am

I had a similar issue.

/sapphire/core/model/image.php line 435(for me) or search for function iframe()

change

if(!Permission::check('ADMIN')) Security::permissionFailure($this);

to

//if(!Permission::check('ADMIN')) Security::permissionFailure($this);

this was added in 2.2.2, I'm sure there was a good reason for adding it, but if you have a custom images style uploading, it makes anything except admin get logged out immediately after logging in to the cms and clicking anything.

Avatar
Laax

Community Member, 14 Posts

24 September 2008 at 3:59am

I have exactly the same issue. And I'm working on SS 2.2.2

@howardgrigg: Did the comment line fixed it??

Avatar
Howard

Community Member, 215 Posts

24 September 2008 at 11:27am

Sorry I havent tried it - I just gave the client admin permissions - should prolly have a go at fixing it though

Avatar
Laax

Community Member, 14 Posts

24 September 2008 at 8:42pm

Hi,
Instead of commenting the line, it seems that you should change the permission test.
There is a bug ticket about it : [url]http://open.silverstripe.com/ticket/2769 [/url]