"Access denied" when saving resources after upgrade to 2.2.8

[tillilab]

tillilab created Redmine issue ID 9999

I have a website with more or less 20 users, 3 administrators and the other "content editors". After upgrading to 2.2.8 intermittently users can't save resources and they receive "access denied". Users must logout and login again in order to be able to save.

It happens both to admin and editors. It doesn't affect elements, only resources. No error is logged.

I use advanced installation but it affects also standard as reported here from other user: http://forums.modx.com/thread/?thread=85173&page=1

[glenwith1n]

glenwith1n submitted:

We have had the same problem after upgrading to 2.2.8 on about 5-6 sites, some new installs, some upgrades, flushing permissions fixes temporarily. MODx - 2.2.8 standard PHP - 5.3.23 MySQL - 5.1.65-cll

[sdwespi]

sdwespi submitted:

I've seen the same issue on a few different sites running 2.2.8 advanced, but ours are running nginx / fpm. It does look like a session issue.

[marcushouse]

marcushouse submitted:

I am also getting this on a heap of our installations as well. When saving a resource we'll sometimes get the access denied error. We are running on cPanel WHM It is causing a lot of grief for our clients. When I trace the return JSON I get this {"success":false,"message":"Access denied.","total":0,"data":[],"object":{"code":401}}

MODX Revolution 2.2.8-pl (traditional) PHP Version 5.3.23 MySQL - 5.1.65-cll

[tillilab]

tillilab submitted:

I confirm the error, replied also on other websites: standard installations on different server, sometimes it occurs also with a single manager user.

[rossco]

rossco submitted:

I can confirm this is happening with 2.2.8 advanced on one of my sites.

The only way to solve this is to logout and back in...

[tillilab]

tillilab submitted:

According to forum discussion the problem occurs also with clean install of 2.2.8.

Super user F1losof found a workaround: http://forums.modx.com/thread/85173/after-upgrade-to-2-2-8-problem-access-denied-on-save?page=6#dis-post-476634

[modxbot]

phil_w submitted:

I can also confirm that all my installs are suffering from this. Even 2.2.9 versions (unless I'm going mad). Flushing sessions allows people to get on with work temporarily. Anyone applied the above temp fix and had anything bad happen? Or ok to go ahead? Thanks.

[modxbot]

montagproject submitted:

I confirm. The same problem happens in 2.2.9. Access denied on save. However it seems that the problem is more frequent on Chrome (windows7/64 chrome 29.0.1547.76 m) than in Firefox (23.01)

[opengeek]

opengeek submitted:

We really need to identify any common factors among the sites experiencing this. I have exhaustively tried to reproduce this and cannot do so no matter what I do. There must be some configuration setting or Extra in common among the sites having this problem.

[modxbot]

phil_w submitted:

Something peculiar there then. The snapshot of one of my live modxcloud sites I provided to Mike locks me out every other day so I'm very surprised it doesn't do it to you guys :-(

[modxbot]

might-e submitted:

Just had the same problem on a website with articles, never had it before though.

The version in the manager says it is version 2.2.8, although it said that the update to 2.2.10 was successful. I guess this was caused by the lack of support for merged copying. I still have to sort it out, but I hate the hosting for delivering bad tools and a quite limited version of Plesk.

Problem occurred in Firefox, was resolved after logging out and back in again. Before logging out I tried flushing permissions (the one without logging out all users) and inspected error report. I also opened up firebug to inspect the response from the server, but there was no activity in the console after the page was loaded, which confused me.

EDIT: It seems the problem is occuring more frequently now. Error log doesn't seem to say anything apart from needle/haystack function which receives wrong a string and an array but expects two arrays. This is part of the FormIt snippet.

Another error that seems to occur quite a few times is: (ERROR @ [....]/httpdocs/core/components/migx/model/migx/migx.class.php : 1602) PHP warning: Parameter 2 to array_multisort() expected to be a reference, value given.

[garryn]

Sounds very much like a connector.php issue I fixed regarding the Gallery Extra a while back - please ensure you're on the latest versions of Gallery and MODX ... closing, but please reopen if this problem still persists after upgrading. Thanks :)