By Inspire Theme LTD on Thursday, 09 July 2015
Posted in Technical Issues
Likes 0
Views 1K
Votes 0
Hey guys,

As the title says, I have an issue where a user is able to "Edit" other users posts.

It seems that the problem occurs when I set the user manually in the "Who can view replies in this category" section. Have a look at the attached screenshot - the problematic user is "media21". And then have a look at the second screenshot that shows the "Edit" button available for this user, while it should not be.
Hello Ivo,

I am sorry for the delay and confusion of my previous reply. Can you download both attachment below and place it inside the following file path and see how it goes?
1) /components/com_easydiscuss/helpers/moderator.php
2) /components/com_easydiscuss/themes/simplistic/frontpage.index.filters.php

The fix will be included in the next release of easydiscuss.
·
Tuesday, 14 July 2015 14:49
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Ivo,

I've checked your site and your easydiscuss ACL settings for registered user group and it seems like the following option is enabled, http://screencast.com/t/iYiHZFNo . I've helped you to disabled it and it should working correctly now.
·
Thursday, 09 July 2015 17:00
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks Ezrul!
Yep, this has solved the issue

I need to say that I'm quite impressed with your response time

Alright, last question - there is also an "Assigned Posts" tab for this user, while this tab is not present for other users. Why is this tab there and how can I remove/hide it?
·
Thursday, 09 July 2015 17:18
·
0 Likes
·
0 Votes
·
0 Comments
·
Hey Ivo,

This tab is only available to moderators because when a post is assigned to you, it will appear under the "Assigned" tab
·
Friday, 10 July 2015 00:17
·
0 Likes
·
0 Votes
·
0 Comments
·
Thanks for the reply Mark.

Yes, this is what I thought in the beginning, but this is not the case. The "media21" user is not a moderator and has never been.

Could you please check my configuration and let me know what I've done wrong?
·
Friday, 10 July 2015 06:44
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Ivo,

I am sorry for the delay of this reply.

I can't seems to replicate the issue in my local instance. May I have the permission to update your current easydiscuss version to the latest version and see if that will fix the issue? Please advise.
·
Friday, 10 July 2015 11:58
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Ezrul,

I just updated EasyDiscuss to 3.2.9676 but the issue is still there.

Anyway, I did some more tests and it seems that the "Assigned Posts" tab appears whenever the user is added manually in one of the section under the "Permissions" tab. It doesn't matter which of the 5 sections the user is added manually to, once it is added the "Assigned Posts" tab appears for this user.

You can login on the frontend with another user, "media1", and you will see that the "Assigned Posts" tab is NOT there. Then login to the Backend and add the "media1" user in some of the sections under the "Permissions" tab (for "Template 3" category for example), then refresh the front end and you will see that the "Assigned Posts" tab will appear.

I will add the details for the "media1" user here, under the "Site Details" tab.

It does seem to be a bug which is really a big deal for me as I cannot officially open my website for customers until this is fixed.
·
Friday, 10 July 2015 17:05
·
0 Likes
·
0 Votes
·
0 Comments
·
Hello Ivo,

I am sorry for the delay of this reply as it weekends for all of us here.

I've applied some fix inside your /components/com_easydiscuss/themes/simplistic/frontpage.index.filters.php and it should working correctly now.
·
Monday, 13 July 2015 10:56
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Ezrul,

Thank you for the "fix". The "Assigned Posts" is not being shown anymore.

However, I do have few questions about the "fix". I put inverted commas ("") on purpose, as it is not a real fix, but a temporary workaround instead. What you have done is to remove the "Assigned Posts" tab for Moderators so now if I make another user a Moderator (on purpose) he will not see the "Assigned Posts" tab, while he is supposed to. You have changed the following code in "frontpage.index.filters.php":

<?php if(EDC::isSiteAdmin() || EDC::isModerator()) { ?>


to:

<?php if(EDC::isSiteAdmin()) { ?>


So, here are my questions:

1. Do you consider this a bug? I mean when you add a user manually to one of the 5 sections under the "Permissions" tab he is automatically considered as a Moderator.

2. Do you plan on fixing this in the next release of EasyDiscuss? I mean the NEXT release, not in some of the future releases, because currently if I update EasyDiscuss your "fix" will be gone (if I do not create a template override for this file).

3. How did you manage to edit the "frontpage.index.filters.php" file when you do not have my FTP details? Did you install some "File Manager" extension or...?

Look guys, I'm really NOT trying to be a pain in the a$$, I just want you to take this issue seriously.
As you have probably noticed, we are also in the Joomla development industry for several years already, so I just want you to look at this issue and handle it professionally.

I do appreciate your help and I do think you guys are doing a great job with your extensions and with the support you provide
·
Monday, 13 July 2015 17:05
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Ezrul,

Yep, this resolves the issue Thank you very much!

So it was just a typo with the SQL query?

Great product and great support guys! Keep it up!

P.S. Please do not forget to include this fix in the next release
·
Tuesday, 14 July 2015 16:13
·
0 Likes
·
0 Votes
·
0 Comments
·
Hi Ivo,

I am sorry for the inconvenience caused and I am glad to hear your issue is now resolved.

Actually this fix is already been added in the repository and this fix will absolutely be included in the next releases. I will mark this issue is resolved, and if you have anymore question, please do not hesitate to ask us here by creating new ticket. Hopefully this can minimize confusion.

Have a nice day.
·
Tuesday, 14 July 2015 16:25
·
0 Likes
·
0 Votes
·
0 Comments
·
View Full Post