1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

XF 1.4 Permission issues on Secondary Group

Discussion in 'Troubleshooting and Problems' started by ActorMike, Oct 14, 2015.

  1. ActorMike

    ActorMike Active Member

    When a member joins our forum they become a member of the Registered users group which does not have access to download attachments. When they upgrade their membership it adds them to a Secondary User Group called lifetime subscribers and that group has permissions to download attachments (Confirmed in settings)

    I had a user that could not download attachments so I tested the permissions using the admin tool and confirmed the problem. I went in and changed the main user group to lifetime subscriber, and then the download attachments works.

    Is this un unreported but or do I not understand how this is supposed to work?
     
  2. Liam W

    Liam W Well-Known Member

    You shouldn't change the primary usergroup - that should be Registered Users for all users.

    Permissions are cumulative. If you revert the user to the registered users group and add the lifetime group as a secondary one, does the issue remain?

    If it does, what does the permissions analyser say for that user?

    Liam
     
  3. Brogan

    Brogan XenForo Moderator Staff Member

  4. ActorMike

    ActorMike Active Member

    View attachments to posts: is set to Not Set (No) on Registered users and for Lifetime Subscribers it is set to Allow.

    None of the permissions for registered user are set to Never.
     
  5. Brogan

    Brogan XenForo Moderator Staff Member

    That should work then.

    Do you use aMember or any other similar software?
     
  6. ActorMike

    ActorMike Active Member

    Hey @Brogan I just did an analysis and then tested the permissions as the user, and it says they can view attachments but the forum says: You do not have permission to view this page or perform this action.

    View attachments to posts:
    Yes (Details)
    Forum Permissions - View attachments to posts
    Global Permission Values
    Gold Subscriber: Allow
    Registered: Not Set (No)
    Final Value (Global): Yes


    The only thing I use is bdpaygate to process the Authorize.net payments.

    P.S. I went in and changed the main user group to lifetime subscriber, and then the download attachments works.
     
  7. Brogan

    Brogan XenForo Moderator Staff Member

    Does it work if you manually upgrade a user, rather than via the paid account upgrade?

    If so, that could indicate a problem related to the add-on.
     
  8. ActorMike

    ActorMike Active Member

    XF is adding them to the secondary usergroup successfully (see attachment), the permissions would be handled by XF from there wouldn't they? This paid user's main group is Registered and secondary group Gold Subscriber is checked. So long as the user has the secondary group checked and that group as attachment permissions, they should have access to the file, regardless of how the box was check, whether that be manual or automated, correct?

    Here is this users permissions for attachments and they cannot download the files here either.

    View attachments to posts:
    Yes (Details)
    Forum Permissions - View attachments to posts
    Global Permission Values
    Gold Subscriber: Allow
    Registered: Not Set (No)
    Final Value (Global): Yes
     

    Attached Files:

  9. ActorMike

    ActorMike Active Member

    @Brogan for troubleshooting purposes I manually created a user as you suggested, and it still gives the same permissions error. Thanks for your feedback.

    View attachments to posts:
    Yes (Details)
    Forum Permissions - View attachments to posts
    Global Permission Values
    Gold Subscriber: Allow
    Registered: Not Set (No)
    Final Value (Global): Yes
     
  10. Brogan

    Brogan XenForo Moderator Staff Member

    Something must be involved which is preventing the permission cache from being updated correctly.

    Try manually upgrading a member with all add-ons disabled.
     
  11. ActorMike

    ActorMike Active Member

    Hey @Brogan disabled all add ons (only 3) created a new user manually in the admin, same problem.
     
  12. Chris D

    Chris D XenForo Developer Staff Member

    If you edit the post content, is the attachment code like this:
    Code:
    [ATTACH]1234[/ATTACH]
    Or is it a URL to an attachment, like this:
    Code:
    [url]https://www.example.com/attachments/1234[/url]
    If it's the latter, are you sure the attachment actually still exists? If so, are you sure it was attached in a forum the Subscriber user can see? It could also be problematic if the attachment was originally attached to a Conversation message rather than a post.

    EDIT: I guess the easiest test, would be, if you upload a new attachment to a thread the subscriber user can view, is the attachment viewable/downloadable then?
     
  13. ActorMike

    ActorMike Active Member

    Yes, the attachment exists, and if I change the user's main group to Lifetime Subscriber instead of registered they can download the attachment, also admins can as well. Here is the page http://forums.fordthunderbirdforum.com/threads/thunderbird-manuals-electronic-version.2998/
     
  14. ActorMike

    ActorMike Active Member

    @Chris D Here is some more information. I just allowed view attachments for registered users and they still can't download and get the error page. Here is the analysis for the user .

    View attachments to posts:
    Yes (Details)
    Forum Permissions - View attachments to posts
    Global Permission Values
    Gold Subscriber: Allow
    Registered: Allow
    Final Value (Global): Yes
     
  15. Martok

    Martok Well-Known Member

    Quick question. If I'm correct, those are the Global permissions for viewing attachments to posts. If so, what are the node permissions for viewing attachments to posts?
     
  16. Chris D

    Chris D XenForo Developer Staff Member

    Are you analysing the permissions in the "Global Permissions" tab or the "Node Permissions" tab. The latter, in this case, is better. I suspect there may be a node level permission affecting this.
     
    Mr Lucky and ActorMike like this.
  17. ActorMike

    ActorMike Active Member

    That was it @Chris D , thank you sir!
     

Share This Page