Anonymous user can not edit guestbook entry

Author Message

Maarten Daniels

Saturday 02 September 2006 5:58:32 am

Since I've upgraded my ezpublish to 3.8.3 users on my public site can't edit anymore. I didn't change the policies.

The role anonymous has got these policies:

Module   Function       Limitations  

content  read           Section( Standard section )    
user     login          Siteaccess(mysite)    
content  create         Class( Guestbookentry ) , Section( Standard section ) , ParentClass( Guestbook )    
content  remove         Class( Guestbookentry ) , Owner( Self )    
ezdhtml  all functions  No limitations    
content  edit           Class( Guestbookentry ) , Section( Standard section ) , Owner( Self ) 


When the user clicks on 'create guestbook entry' the access denied message appears. In the database however I can see that the object is created.
When I give the user all content rights (all functions, no limitations) it works. What am I doing wrong?

Kind regards,

Maarten

Kristof Coomans

Monday 04 September 2006 1:56:13 am

Hello Maarten

I think you will have to change the owner limitation of the content/edit policy to <i>Self or anonymous users per HTTP session</i>.

Let us know if this solved your problem.

independent eZ Publish developer and service provider | http://blog.coomanskristof.be | http://ezpedia.org

Maarten Daniels

Monday 04 September 2006 4:11:31 am

Hi Kristof

Thanks for your reply;

I tried to set the policy as you mentioned, but no success. Using debug mode, I get these messages when trying to edit a guestbook entry:

Error ocurred using URI: /index.php/mysite/content/edit/4546/1 

Warning: Insufficient permissions Sep 04 2006 13:07:31 
Function required:
 Module : content
 Function : 
 ClassID : 
 MainNodeID : 
Policies that didn't match:
 
Timing:  Sep 04 2006 13:07:31 

Module end 'error' 

As you can see only the Module name is filled in this message. Does this take you any further?

Thx,

Maarten

Clemens T

Monday 04 September 2006 4:51:04 am

Your content/create has a ParentClass specified (Guestbook), but your content/edit has not. I'm unsure, but maybe that's the problem.

Greets,
Clemens
ps: maybe you've just gotta flush your cache, sometimes it helps :)

Maarten Daniels

Monday 04 September 2006 6:08:07 am

Hi Clemens,

In the admin interface it´s not possible to add a parentclass limitation to the content edit policy. It seems to me howerer that this would not make much sense, because it only narrows down the permissions. And I did clear the cache (several times).

Greetz,

Maarten

Maarten Daniels

Wednesday 06 September 2006 1:04:33 am

When I take a look at the debug output, it seems that some parameters are empty: Function, ClassID, MainNodeID and Policies. Anyone any ideas how this is possible?

Norman Leutner

Friday 08 September 2006 3:27:18 am

Could you post your template code here?

Mit freundlichen Grüßen
Best regards

Norman Leutner

____________________________________________________________
eZ Publish Platinum Partner - http://www.all2e.com
http://ez.no/partners/worldwide_partners/all2e_gmbh

Maarten Daniels

Friday 08 September 2006 10:20:56 am

Hi Norman,

Thanks for your reaction.

I don't think it's my template. First of all, I didn't change it since 3.4.2 and secondly the problem also occurs in the Admin interface (when I give myself the same rights as the anonymous users on the public site)

Cheerz

Maarten

Norman Leutner

Friday 08 September 2006 12:07:07 pm

Hi Maarten,

have you tried altering the policies like:

content create      Class( Guestbookentry ) , Section( Standard section ) 
content edit          Class( Guestbookentry ) , Section( Standard section ) , Owner( Self ) 

Mit freundlichen Grüßen
Best regards

Norman Leutner

____________________________________________________________
eZ Publish Platinum Partner - http://www.all2e.com
http://ez.no/partners/worldwide_partners/all2e_gmbh

Maarten Daniels

Saturday 09 September 2006 1:51:34 am

Hi Norman,

I've tried that. Even when I give the user the edit function without any restrictions, I get the access denied message!!!
It seems that only users with full control on the content module (administrators) can edit???

Greetz,

Maarten

Maarten Daniels

Saturday 09 September 2006 2:11:24 am

Hi All,

I've found it!!! I checked my files using the upgrade check, and discovered that my access.php (on the root dir) was not correct. Copied the right one and ... it worked.

Greetz

Maarten

Norman Leutner

Saturday 09 September 2006 3:03:03 am

Ok...

Mit freundlichen Grüßen
Best regards

Norman Leutner

____________________________________________________________
eZ Publish Platinum Partner - http://www.all2e.com
http://ez.no/partners/worldwide_partners/all2e_gmbh

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.