nexcess / magento-sentry-two-factor-authentication

28 stars 18 forks source link

Login issues with users that have limited permissions #6

Closed aricwatson closed 7 years ago

aricwatson commented 8 years ago

User is reporting getting access denied upon login, for users with limited permissions.

I am on magento 1.9.4 The first time user enters username/pass and is taken to admin but gets a access denied message and also does not get to setup 2 factor. This is for a non admin user with limited permissions. Access areas are catalog, sales, customers, cms but only limited access to admin. cache, index and two factor authentication

guroja commented 8 years ago

Same issue here. The Managers account, who have access to backend with limited permission, like, products, sales, cache, index, etc. are getting permission denied. Please help

jimbo11883 commented 7 years ago

I am also having this issue with a client.

miguelbalparda commented 7 years ago

@jimbo11883 can you add some more info about your issue? Log entries, screenshots and any other information you consider useful.

jimbo11883 commented 7 years ago

After logging into Magento admin, I get the following page: screenshot-honigs com-2016-11-16-11-16-36

jimbo11883 commented 7 years ago

It never gets to the TFA login screen. It doesn't log anything to two_factor_auth.log.

miguelbalparda commented 7 years ago

@jimbo11883 can you access Sales, Catalog, Customers, CMS or System when you see that screen?

jimbo11883 commented 7 years ago

No, it gives you the same screen.

miguelbalparda commented 7 years ago

Can you show me how the admin user is configured?

jimbo11883 commented 7 years ago

Sure.

screenshot-honigs com-2016-11-16-12-17-15 screenshot-honigs com-2016-11-16-12-19-50

miguelbalparda commented 7 years ago

Can you try adding the Dashboard permission for this user role?

jimbo11883 commented 7 years ago

Same issue.

jimbo11883 commented 7 years ago

Any updates on this issue?

miguelbalparda commented 7 years ago

It seems https://github.com/nexcess/magento-sentry-two-factor-authentication/pull/17 fixes this issue, can you give this a try and report back?

jimbo11883 commented 7 years ago

It worked for me! Thanks!

timothydmahon commented 7 years ago

Ran into this issue after branching from master. Any word on when this will be merged into the master branch?