By Sean Carney on Wednesday, 04 June 2014
Posted in Technical Issues
Replies 5
Likes 0
Views 1K
Votes 0
Right now I just learned that I the comments permissions are such that any 'registered' user is able to edit the comments in the EasyBlog section of any other registered user. I want to allow users to edit their own comments but not the comments of other users. I have not been able to find the setting. Can you point me there?
Here is the page where we learned this: https://www.starch-smart.com/blog/entry/vegan-isolation#comments
Hello Sean,

May I know which user do you use to edit comment? I am sorry because I can't replicate this issue on your site. If you use "Sean Carney", you are in multiple group user and you are administrator. Can you create a new user with only registered user group and test this user to edit the comment.

Sorry for the inconvenience caused and looking forward to hear back from you.
Hope this will help.
Thanks.
·
Thursday, 05 June 2014 01:14
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Sean,

I have check your site and it seems like working as it should be. Here my screenshot: http://screencast.com/t/YdGHAkb7TfLl . Perhaps you are testing with registered user and admin in which admin can edit everyone comment. I have created 1 blog post and one user for this testing. You may delete the user after this issue is resolved.
Here is the code for displaying edit:

if( ($this->acl->rules->manage_comment || ($my->id == $comment->created_by && $this->acl->rules->edit_comment || $system->admin ) ) && $my->id != 0 )


Hope this will help.
Thanks.
·
Thursday, 05 June 2014 00:38
·
0 Likes
·
0 Votes
·
0 Comments
·
It is totally not working properly. Please go to the comments that you posted. You will notice that I logged in as a 'registered' user from the front end and I was able to update both of your comments. In fact I can change EVERY word. This is nothing preventing me from totally changing the content of your comment even though I am NOT the one who created the comment. Check this problem out here: https://www.starch-smart.com/blog?view=entry&id=36

I have done this from the front end as a registered user and I also asked one of our other registered users to try it. We can both edit the comments of other registered users.

Actually look again at your screenshot. You will see that I added text to your comment before you took the screenshot. That is text that should not be there. :-)
·
Thursday, 05 June 2014 00:58
·
0 Likes
·
0 Votes
·
0 Comments
·
I believe you are correct and that the problem was that I was in more then one group. Unfortunately one of our registered users told me he was able to click on the edit button to my comment and make edits. But, he did not save them, and, I think he must have been confused and must have been editing one of his comments. So sorry to waste your time on this one. If he is indeed able to edit somebody elses comments I will be shocked since I cannot now that I have changed the user permissions for Sean Carney to be Registered User only. :-)
Thanks, Sean Carney
·
Thursday, 05 June 2014 02:16
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Sean,

You're welcome. Glad to hear your issue have been resolved.
If you have anymore question, please don't hesitate to ask us and please create a new ticket. I will mark this ticket as resolved.

Thanks again and have a wonderful day.
·
Thursday, 05 June 2014 02:23
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post