You will often see that on XF\Entity\User when updating add-ons because everyone extends that class to add in permissions..Hi Andrew, you were right, this seemed to occur only during the updating, so only 2 instances and then no more.
Cheers,
Andre
You will often see that on XF\Entity\User when updating add-ons because everyone extends that class to add in permissions..Hi Andrew, you were right, this seemed to occur only during the updating, so only 2 instances and then no more.
Cheers,
Andre
No and that sounds like a bad idea to me.Hello, does these addon has a setting where posts from moderators can not be liked or disliked by user?
It does not. I think that feature would be best in a separate add-on where that permission can be controlled by user group.Hello, does these addon has a setting where posts from moderators can not be liked or disliked by user?
Are you asking for a list of who has reported the post posts, users, etc?can you add who has sent how much report* best addon thanks
No, this add-on does not do that. I am not aware how you would have users register for usernames that already exist.Hi Andrew, is there a feature that filters new registrations to see if the username is already in use? I have moderators who encounter a request for approval of a new registration that was "set aside for manual approval" because it uses a username already in use.
I'm trying to find out where that comes from, I thought maybe it was your addon?
Thank you, a moderator asked me to find out how to disable that filter or maybe remove those notifications to moderators... I'll need to ask for a screenshot next time.No, this add-on does not do that. I am not aware how you would have users register for usernames that already exist.
Thank you very much, that fixed it.Open the report and resolve/respond to the issue. That's what works for me.
Andrew\ModeratorPanel\Pub\Controller::actionIpAddresses() and Andrew\ModeratorPanel\Pub\Controller::actionIpUsers() do allow access for anyone who has permission to access the Panel.$visitor->canViewIps() into account?actionCurrentBan, actionWarnings and actionThreadBans would also be appreciated.andrew_moderatorpanel_dashboard_macros, andrew_moderatorpanel_macros, andrew_moderatorpanel_user_ban_list contain hardcoded text Edit banandrew_moderatorpanel_moderator_panel and andrew_moderator_panelandrew_moderatorpanel_recently_regisered_usersAndrew\ModeratorPanel\Pub\Controller\ModeratorPanel::actionUserNotes() that does allow users that have either condition to view user notes; it probably should be only users that have both permissions - at least it shold by only users taht do have the permission to view user notesif (!$visitor->canViewModeratorPanel() && !$visitor->canViewUserNotes())
{
return $this->noPermission();
}
Thanks Kirby. I have a flight back home tomorrow and should be able to address most of this on Saturday and Sunday. I'll get out a release this weekend. Thanks for the detail.This is a nice Add-on, thank you for providing this
MethodsAndrew\ModeratorPanel\Pub\Controller::actionIpAddresses()andAndrew\ModeratorPanel\Pub\Controller::actionIpUsers()do allow access for anyone who has permission to access the Panel.
Can this be changed to also take the existing permission$visitor->canViewIps()into account?
For legal reasons we can't allow moderators to access IP adresses, so this currently prevents us from being able to use this Add-on.
Similar changes foractionCurrentBan,actionWarningsandactionThreadBanswould also be appreciated.
Further Issues
- Templates
andrew_moderatorpanel_dashboard_macros,andrew_moderatorpanel_macros,andrew_moderatorpanel_user_ban_listcontain hardcoded text Edit ban- Duplicate phrases
andrew_moderatorpanel_moderator_panelandandrew_moderator_panel- Typo phrase
andrew_moderatorpanel_recently_regisered_users- There is w wrong condition check in
Andrew\ModeratorPanel\Pub\Controller\ModeratorPanel::actionUserNotes()that does allow users that have either condition to view user notes; it probably should be only users that have both permissions - at least it shold by only users taht do have the permission to view user notes
As I'd consider this a security related bug it should be fixed in a timely manner.PHP:if (!$visitor->canViewModeratorPanel() && !$visitor->canViewUserNotes()) { return $this->noPermission(); }- It is still possible to search for IP adresses even if permission View IP addresses is not given
- The dashboard shows "Activity blocks" for Active & Closed reports even if reports are being sent to a forum
This seems unnecessary and confusing as those counters will both be zero all the time anyway in this case- Recent warnings does show an end date for timestamp 0 instead of phrase never for non-expiring warnings
Just finished these updates. I am going to do some more testing tomorrow and then release the update.This is a nice Add-on, thank you for providing this
MethodsAndrew\ModeratorPanel\Pub\Controller::actionIpAddresses()andAndrew\ModeratorPanel\Pub\Controller::actionIpUsers()do allow access for anyone who has permission to access the Panel.
Can this be changed to also take the existing permission$visitor->canViewIps()into account?
For legal reasons we can't allow moderators to access IP adresses, so this currently prevents us from being able to use this Add-on.
Similar changes foractionCurrentBan,actionWarningsandactionThreadBanswould also be appreciated.
Further Issues
- Templates
andrew_moderatorpanel_dashboard_macros,andrew_moderatorpanel_macros,andrew_moderatorpanel_user_ban_listcontain hardcoded text Edit ban- Duplicate phrases
andrew_moderatorpanel_moderator_panelandandrew_moderator_panel- Typo phrase
andrew_moderatorpanel_recently_regisered_users- There is w wrong condition check in
Andrew\ModeratorPanel\Pub\Controller\ModeratorPanel::actionUserNotes()that does allow users that have either condition to view user notes; it probably should be only users that have both permissions - at least it shold by only users taht do have the permission to view user notes
As I'd consider this a security related bug it should be fixed in a timely manner.PHP:if (!$visitor->canViewModeratorPanel() && !$visitor->canViewUserNotes()) { return $this->noPermission(); }- It is still possible to search for IP adresses even if permission View IP addresses is not given
- The dashboard shows "Activity blocks" for Active & Closed reports even if reports are being sent to a forum
This seems unnecessary and confusing as those counters will both be zero all the time anyway in this case- Recent warnings does show an end date for timestamp 0 instead of phrase never for non-expiring warnings
- Updated hard coded "Edit Ban" to {{ phrase('edit_ban') }}
- Removed phrase "andrew_moderatorpanel_moderator_panel" and replaces instances of it with andrew_moderator_panel
- Fixed spelling of andrew_moderatorpanel_recently_regisered_users and removed duplicate phrase
- Fixed incorrect operator on user note permission that could allow users with panel access but not user note access to view user notes
- Warnings that never expire will show "Never" instead of a date in 1969...
This has all been fixed in version 1.4.3. I strongly encourage everyone to upgrade.This is a nice Add-on, thank you for providing this
MethodsAndrew\ModeratorPanel\Pub\Controller::actionIpAddresses()andAndrew\ModeratorPanel\Pub\Controller::actionIpUsers()do allow access for anyone who has permission to access the Panel.
Can this be changed to also take the existing permission$visitor->canViewIps()into account?
For legal reasons we can't allow moderators to access IP adresses, so this currently prevents us from being able to use this Add-on.
Similar changes foractionCurrentBan,actionWarningsandactionThreadBanswould also be appreciated.
Further Issues
- Templates
andrew_moderatorpanel_dashboard_macros,andrew_moderatorpanel_macros,andrew_moderatorpanel_user_ban_listcontain hardcoded text Edit ban- Duplicate phrases
andrew_moderatorpanel_moderator_panelandandrew_moderator_panel- Typo phrase
andrew_moderatorpanel_recently_regisered_users- There is w wrong condition check in
Andrew\ModeratorPanel\Pub\Controller\ModeratorPanel::actionUserNotes()that does allow users that have either condition to view user notes; it probably should be only users that have both permissions - at least it shold by only users taht do have the permission to view user notes
As I'd consider this a security related bug it should be fixed in a timely manner.PHP:if (!$visitor->canViewModeratorPanel() && !$visitor->canViewUserNotes()) { return $this->noPermission(); }- It is still possible to search for IP adresses even if permission View IP addresses is not given
- The dashboard shows "Activity blocks" for Active & Closed reports even if reports are being sent to a forum
This seems unnecessary and confusing as those counters will both be zero all the time anyway in this case- Recent warnings does show an end date for timestamp 0 instead of phrase never for non-expiring warnings
We use essential cookies to make this site work, and optional cookies to enhance your experience.