XF 2.0 Very strange problem

Abraham54

Well-known member
Which site: https://www.nationaalcomputerforum.nl/

Problem: when logged in there is a problem with a forum that is in Private modus; another subforum not even shows.

Not logged in:



When logged in:



In Admin there is no problem with the nodes, nothing is in Private modus; permissions are normally set.

Until now I have not figured out what is wrong.
 
Problem is solved.
Somebody unknown has been tampering with permissions.
One user group had complete moderator rights.
Ik took me more than five hours today set the node permissions back to normal.
 
Someone had to had changed them, permissions or any settings for that matter don't simply change in their own. Only way around that is if someone manipulated the DB somehow, either by hand or a script.
 
So, the server is compromised, and they used all that power to merely change permissions on a single node?

Sorry, that doesn't seem likely, at all :)

I think the most likely scenario is that it was changed by someone with access to permissions, perhaps unintentionally. You may have not been able to identify it in the logs, as it could have been done unintentionally with a legitimate change or someone did it and simply didn't understand the repercussions of it.

Obviously keep an eye out for strange goings on, but there's nearly always a more logical explanation.
 
The server is not compromised and what is more, so far I can see it is not possible in the database to chance node permessions.

After resetting all nodes permissions I controlled the User groups.
And found what I see as the culprit.

Originally i have renamed Newly Registered to Nieuw lid.
In the original XenForo permission settings I only changed a few settings.

By controlling last Sunday the group Nieuw lid I noticed that all moderator permissions where applied.

I don't know how this came about, but the settings for the moderator permissions were deactivated.
 
Back
Top Bottom