KBG88 / cpassman

Automatically exported from code.google.com/p/cpassman
0 stars 0 forks source link

item not editable even if GOD #71

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1.upgradind from 2.0b2_20110411 to 2.0b3_20110515/2.0b3_20110518
2.
3.

What is the expected output? What do you see instead?
I can't view and edit previous created item

What version of the product are you using?
2.0b3_20110518

On what operating system? With what Browser (IEx, FFx, ...)
All

Please provide any additional information below.
After editing previuos saved item or a new item, I can't view/edit it even if 
I've GOD privilegies, it says "You are not allowed to see that Item!"

Original issue reported on code.google.com by gnagn...@gmail.com on 19 May 2011 at 6:35

GoogleCodeExporter commented 9 years ago
Ok ... admin privilegies do not give you the right to see every thing. It only 
gives you access to administration rights.

If you can't see an item, that means that the item or the folder is not 
accessible to your user.
Please check your role matrix.

Nils

Original comment by nils.cpa...@gmail.com on 19 May 2011 at 4:26

GoogleCodeExporter commented 9 years ago
The problem is:

1- I create an item X, save and close
2- I modify X and save and close
3- X become unreadable from my user

or

1- I modify an existing X item, save and close
2- X become unreadable from my user

Original comment by gnagn...@gmail.com on 20 May 2011 at 6:02

GoogleCodeExporter commented 9 years ago
Arg I can't manage to reproduce that.

Can you send me a screen capture of admin settings page tab "Customize"?
If possible send also a capture of the "roles management" page.

Thanks

Original comment by nils.cpa...@gmail.com on 21 May 2011 at 8:12

GoogleCodeExporter commented 9 years ago
I'm sorry but the server where I installed cpassman broke during week end...
Now, a new installation have no problems.

Original comment by gnagn...@gmail.com on 23 May 2011 at 11:56

GoogleCodeExporter commented 9 years ago
This happens for me using safari

Original comment by slicric...@gmail.com on 24 May 2011 at 1:21

GoogleCodeExporter commented 9 years ago
Firefox 4 here

Original comment by gnagn...@gmail.com on 24 May 2011 at 1:39

GoogleCodeExporter commented 9 years ago
Thanks for your input guys.

Can you also add a screenshot why the cusomization options you've selected?

It must be a specific case that I didn't find yet

Nils

Original comment by nils.cpa...@gmail.com on 25 May 2011 at 7:37

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
I can post only new configuration, not the problematic one...

Original comment by gnagn...@gmail.com on 26 May 2011 at 7:15

GoogleCodeExporter commented 9 years ago
Having similar issue, but my problem is that I can't create folders, even as 
GOD.  It just churns away, the other screen doesn't even do anything.  Used 
FireFox latest, IE9, Chrome.

Original comment by skysoft...@gmail.com on 10 Jun 2011 at 3:05

GoogleCodeExporter commented 9 years ago
So I figured this out just by chance 

Before you edit the password unMask it(click the eye). then edit it. and hit 
save. 

Hope that helps guys 

Mark J- BC

Original comment by markj...@gmail.com on 28 Jun 2011 at 8:24

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
I have items that users with 'god' permission cannot view, (You are not allowed 
to see that item!).  

so far, my solution has been to modify the user, removing 'god' permissions, 
adding admin, and now i can magically see the same item that i could not see as 
'god'.  I have not found any exceptions to this fix.  viewing database tables, 
i could not find a common property between the 8 items that 'god' level users 
were not able to see.  

i'm running 2.00b4 on centos 5.6, using chrome12.0.742.100 on ubuntu 10.10

Original comment by david.a....@t2health.org on 30 Jun 2011 at 6:31

GoogleCodeExporter commented 9 years ago
Have you check that those items have no specific access rights.
Indeed if the item is restricted to one or several users, or to a specific 
group, then the users that are not named or in this specific group will not be 
allowed to see it. Even if they are god.

So identify one item they are not allowed to see and ask the author to change 
the restriction rights.

Original comment by nils.cpa...@gmail.com on 2 Jul 2011 at 8:05

GoogleCodeExporter commented 9 years ago
I isolated one item that users with god permission are not allowed to view, and 
looked at the item with my user account.  the item in question has "none 
selected" under the 'Restricted to:' option.  i did create additional items 
with the restrictions set to confirm functionality.  It works as expected.

the roles management on the particular folder that this item which god is not 
able to view is set to allow access to 2 of the 8 groups that we have created.  
this folder contains a total of 3 items.  all three have the same restrictions 
(none selected) and all 3 are visible to any member of the admin group.  If i 
log in as a user with god privilege then i can only view 2 of the 3.

Out of the 10 folders which have content, 6 of them contain objects that admin 
can see, but god cannot. These problem objects have 3 different creators, and 
are not evenly distributed between folders.  I cannot find a pattern or common 
thread among them, as far as creator, location, creation date, object name, or 
restrictions.

I am currently searching through the database tables trying to understand what 
is happening.  any insight you might  would be appreciated.

thanks

-dc

Original comment by david.a....@t2health.org on 5 Jul 2011 at 3:58

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
I have this problem too. :(

Original comment by tkristof...@gmail.com on 13 Aug 2011 at 9:43

GoogleCodeExporter commented 9 years ago
I have the exact same problem
I attached the admin view and a user who has GOD privileges
As admin i'm able to change the roles
As GOD user i see only one user for who i can change the roles

Is GOD not supposed to have the same level as admin?

Thx,
Franck

Original comment by franck.b...@gmail.com on 26 Sep 2011 at 11:10

Attachments:

GoogleCodeExporter commented 9 years ago
Oh and i use RC2+Chrome+OSX btw
Thx,
Franck

Original comment by franck.b...@gmail.com on 26 Sep 2011 at 11:11

GoogleCodeExporter commented 9 years ago
Hi there,

Very strange behavior, I've tested on my side and a new admin has all 
modification rights.
Is it possible for you to test this:
create a new user and tick the right "is admin", log in with this new user and 
tell me.

Original comment by nils.cpa...@gmail.com on 27 Sep 2011 at 6:42

GoogleCodeExporter commented 9 years ago
Nils,
I never create users manually
They are auto generated by LDAP authentication
That could come from that no?
If yes is there a way to fix it manually for now?
Franck

Original comment by franck.b...@gmail.com on 27 Sep 2011 at 10:35

GoogleCodeExporter commented 9 years ago
Hum ok.

I've taken a look to the code, ther is no differences between ldap or not. So 
this should not have any incidence.
Can you take a look in the DB, in table Users. Check if this user has value 1 
in field "admin".

Original comment by nils.cpa...@gmail.com on 28 Sep 2011 at 6:42

GoogleCodeExporter commented 9 years ago
Nils,
I checked that. The user has 1 in the admin column in the table users of the DB
Is there something else i can check?
Franck

Original comment by franck.b...@gmail.com on 28 Sep 2011 at 3:29

GoogleCodeExporter commented 9 years ago
Nils,
I poked around and found that if the user has manager rights and GOD rights i 
don't see the little gears
If i remove manager rights, the gears come back
Note that when manager is checked some of the gears appear (but not all of them)
In the DB, it's the column "gestionnaire" set to [0|1]
Hope that helps
Franck

Original comment by franck.b...@gmail.com on 28 Sep 2011 at 3:43