XF 1.4 Permission issues on Secondary Group

[ActorMike]

When a member joins our forum they become a member of the Registered users group which does not have access to download attachments. When they upgrade their membership it adds them to a Secondary User Group called lifetime subscribers and that group has permissions to download attachments (Confirmed in settings)

I had a user that could not download attachments so I tested the permissions using the admin tool and confirmed the problem. I went in and changed the main user group to lifetime subscriber, and then the download attachments works.

Is this un unreported but or do I not understand how this is supposed to work?

 

[Liam W]

You shouldn't change the primary usergroup - that should be Registered Users for all users.

Permissions are cumulative. If you revert the user to the registered users group and add the lifetime group as a secondary one, does the issue remain?

If it does, what does the permissions analyser say for that user?

Liam

 

[Paul B]

How have you removed the permission in the Registered user group?

Have you used Not Set (No) or Never?

This guide explains how to set up permissions: http://xenforo.com/community/resources/implementing-permissions-across-multiple-user-groups.358/

 

[ActorMike]

View attachments to posts: is set to Not Set (No) on Registered users and for Lifetime Subscribers it is set to Allow.

None of the permissions for registered user are set to Never.

 

[Paul B]

That should work then.

Do you use aMember or any other similar software?

 

[ActorMike]

Hey @Brogan I just did an analysis and then tested the permissions as the user, and it says they can view attachments but the forum says: You do not have permission to view this page or perform this action.

View attachments to posts:
Yes (Details)
Forum Permissions - View attachments to posts
Global Permission Values
Gold Subscriber: Allow
Registered: Not Set (No)
Final Value (Global): Yes


The only thing I use is bdpaygate to process the Authorize.net payments.

P.S. I went in and changed the main user group to lifetime subscriber, and then the download attachments works.

 

[Paul B]

Does it work if you manually upgrade a user, rather than via the paid account upgrade?

If so, that could indicate a problem related to the add-on.

 

[ActorMike]

XF is adding them to the secondary usergroup successfully (see attachment), the permissions would be handled by XF from there wouldn't they? This paid user's main group is Registered and secondary group Gold Subscriber is checked. So long as the user has the secondary group checked and that group as attachment permissions, they should have access to the file, regardless of how the box was check, whether that be manual or automated, correct?

Here is this users permissions for attachments and they cannot download the files here either.

View attachments to posts:
Yes (Details)
Forum Permissions - View attachments to posts
Global Permission Values
Gold Subscriber: Allow
Registered: Not Set (No)
Final Value (Global): Yes

 

[ActorMike]

@Brogan for troubleshooting purposes I manually created a user as you suggested, and it still gives the same permissions error. Thanks for your feedback.

View attachments to posts:
Yes (Details)
Forum Permissions - View attachments to posts
Global Permission Values
Gold Subscriber: Allow
Registered: Not Set (No)
Final Value (Global): Yes

 

[Paul B]

Something must be involved which is preventing the permission cache from being updated correctly.

Try manually upgrading a member with all add-ons disabled.

 

[ActorMike]

Hey @Brogan disabled all add ons (only 3) created a new user manually in the admin, same problem.

 

[Chris D]

If you edit the post content, is the attachment code like this:

[ATTACH]1234[/ATTACH]

Or is it a URL to an attachment, like this:

[url]https://www.example.com/attachments/1234[/url]

If it's the latter, are you sure the attachment actually still exists? If so, are you sure it was attached in a forum the Subscriber user can see? It could also be problematic if the attachment was originally attached to a Conversation message rather than a post.

EDIT: I guess the easiest test, would be, if you upload a new attachment to a thread the subscriber user can view, is the attachment viewable/downloadable then?

 

[ActorMike]

If you edit the post content, is the attachment code like this:

[ATTACH]1234[/ATTACH]

Or is it a URL to an attachment, like this:

[url]https://www.example.com/attachments/1234[/url]

If it's the latter, are you sure the attachment actually still exists? If so, are you sure it was attached in a forum the Subscriber user can see? It could also be problematic if the attachment was originally attached to a Conversation message rather than a post.

Yes, the attachment exists, and if I change the user's main group to Lifetime Subscriber instead of registered they can download the attachment, also admins can as well. Here is the page http://forums.fordthunderbirdforum.com/threads/thunderbird-manuals-electronic-version.2998/

 

[ActorMike]

@Chris D Here is some more information. I just allowed view attachments for registered users and they still can't download and get the error page. Here is the analysis for the user .

View attachments to posts:
Yes (Details)
Forum Permissions - View attachments to posts
Global Permission Values
Gold Subscriber: Allow
Registered: Allow
Final Value (Global): Yes

 

[Martok]

Quick question. If I'm correct, those are the Global permissions for viewing attachments to posts. If so, what are the node permissions for viewing attachments to posts?

 

[Chris D]

Are you analysing the permissions in the "Global Permissions" tab or the "Node Permissions" tab. The latter, in this case, is better. I suspect there may be a node level permission affecting this.

 

[ActorMike]

That was it @Chris D , thank you sir!