mariovaldez.net
http://www.mariovaldez.net/webapps/forums/

all users can run Admin Console
http://www.mariovaldez.net/webapps/forums/viewtopic.php?f=1&t=180		 Page 1 of 1
Author:  calo [ 19 Jan 2005, 08:30 ]
Post subject:  all users can run Admin Console
Cordial Saludo Mario Álvarez,

tengo instalado tan excelente CMS en mi groupware, que cuenta con 2 grupos solamente, default (root, test) y AS (usuario1, usuario2, usuario3) si ingreso con cualquiera de los usuarios cada uno de ellos puede editar los archivos de configuración y ver la consola administrativa del cms... mi pregunta es: dónde tengo el error?.. ya he verificado la matriz de permisos y quiero que solo el usuario root pueda modificar la configuración.

I have installed so excellent CMS in my groupware, that only counts on 2 groups, default (root, test) and AS (usuario1, usuario2, usuario3) if entrance with anyone of the users each one of them can access the configuration files and to see the administrative console of CMS... my question is: where I have the error.. I have verified the matrix of permissions and already I want that single the user root can modify the configuration

thanks in advance
Author:  mvaldez [ 20 Jan 2005, 01:56 ]
Post subject:  All users can view the console...
Calo:

> tengo instalado tan excelente CMS en mi groupware,
> que cuenta con 2 grupos solamente, default (root, test)
> y AS (usuario1, usuario2, usuario3) si ingreso con
> cualquiera de los usuarios cada uno de ellos puede
> editar los archivos de configuración y ver la consola
> administrativa del cms... mi pregunta es: dónde tengo
> el error?.. ya he verificado la matriz de permisos y
> quiero que solo el usuario root pueda modificar la
> configuración.

Eso está muy raro. :?
La consola de administración sólo es accesible a un usuario que se configura al instalar el CMS. Generalmente uno deja el usuario "root1". No debería suceder que más de un usuario pudieran entrar.

¿Probaste con varios navegadores? ¿Quizás desde otra computadora? Lo digo para descartar algún problema con el manejo de cookies y sesiones.


Para diagnosticar, cuando entras como el usuario1, por ejemplo, y vas a la consola de administración, y seleccionas "Reconfigure the CM module", debe aparecer un texto como el siguiente:

Quote:
Your current user identification is root1
The superuser identification is root1


¿Qué le aparece la usuario1? Con eso puedo tener una pista de qué es lo que está pasando.



> I have installed so excellent CMS in my groupware,
> that only counts on 2 groups, default (root, test) and
> AS (usuario1, usuario2, usuario3) if entrance with
> anyone of the users each one of them can access
> the configuration files and to see the administrative
> console of CMS... my question is: where I have the
> error.. I have verified the matrix of permissions and
> already I want that single the user root can modify
> the configuration

That's very weird. :?
The management console only can be accessed by one user configurable during the installation of the CMS. Usually you leave the user "root1". It shouldn't be possible that more than one user can enter to the console.

Have you tested with more than one browser? Maybe using another computer? I ask this to discard any cookie and session management issue.

To diagnose, when you login as user1, for example, and visit the management console, and load the "Reconfigure the CM module" link, it should display a text like the following:

Quote:
Your current user identification is root1
The superuser identification is root1


What does it display for the user1? Whit that information I can have a clue about what is going on.


Regards,

Mario A. Valdez-Ramirez.
Author:  calo [ 21 Jan 2005, 06:12 ]
Post subject:  El problema es el navegador
Buen Día Mario,

el problema se limita a las cookies del navegador, es así..

login -> root
luego me debo logear de nuevo al CMS,
CMSlogin -> root

si me salgo del phprojekt, y me logeo como usuario, me queda la sesión de root en el CMS, y justo alli es donde yo me asusté :shock:

Ingresé como un usuario normal y efectivamente me pidio 1. ingreso al phprojekt 2. ingreso al CMS. de hay en adelante solo me dejo ver. (Perfecto)

pues bien mi pregunta ahora es: que debo hacer para integrar el login?

////////////////////////////////

Good day Mario,

The problem is limited the cookies of the navigator, is then '
.. login - > root
soon I am due to login again to the CMS,
CMSlogin - > root

if I leave phprojekt, and login me like user, I has left the session of root in the CMS, and right alli is where I was scared :shock:

I indeed entered like a normal user 1, entrance to phprojekt 2, entrance to the CMS. of it has ahead in single I let myself see. (Perfect)

then my question now is: that I must make to integrate login?


thanks in advance...
Author:  Dan [ 18 Feb 2005, 14:41 ]
Post subject:  having the same problem
I'm having the same problem as Calo. I wonder why we are the first people having this problem.

May be because we tested the cms in only one computer using different users instead of using different computers (one for each user)?

I would really appreciate if you could help us on this
Author:  cluge [ 25 Feb 2005, 06:23 ]
Post subject:  What I have found
This is just a guess but - it appears that in the latest version of CMS + the latest version of phprojekt - that the CMS module doesn't read the same cookie as phprojekt. Thus I can log into phprojekt and when I click on "start" to goto the CMS part of the portal, I often have to login again! The interesting thing is that once logged in, I am never logged out unless I close my browser. Thus I can login as root once, but no matter what user I switch to by logging out and back in, when I click on start and goto the CMS system - I will still be logged into that module as root, because that is what I logged into CMS as. I see two cookies set by phprojekt. The phpsessionid, and one other.

I hope this helps people track the issue down. CMS seems like it's the ultimate add on to phprojekt and satisfies those last needs that need to be scratched. Is there any possability of the CMS module being rolled into the distribution?

cluge
Author:  mvaldez [ 25 Feb 2005, 19:50 ]
Post subject:  Thanks for the clue !
cluge:

> This is just a guess but - it appears that in the latest
> version of CMS + the latest version of phprojekt -
> that the CMS module doesn't read the same cookie
> as phprojekt. Thus I can log into phprojekt and when
> I click on "start" to goto the CMS part of the portal,
> I often have to login again! The interesting thing is that
> once logged in, I am never logged out unless I close
> my browser. Thus I can login as root once, but no
> matter what user I switch to by logging out and back
> in, when I click on start and goto the CMS system -
> I will still be logged into that module as root, because
> that is what I logged into CMS as. I see two cookies
> set by phprojekt. The phpsessionid, and one other.

Thanks for the clue! :!:


> I hope this helps people track the issue down.

Surely it will. I hope to have a definitive answer / patch by this weekend.


> CMS seems like it's the ultimate add on to
> phprojekt and satisfies those last needs that
> need to be scratched. Is there any possability
> of the CMS module being rolled into the distribution?

Ah. Thanks for the comment. About including the CMS into the distribution, I don't know. That something that should be asked to Albrecht. However I don't think that would be a good idea right now, I view the CMS as an immature product compared with Phprojekt.

Regards,

Mario A. Valdez-Ramirez.
Author:  cluge [ 05 Mar 2005, 07:49 ]
Post subject:  Any Luck
Any luck on the double login issue?
Author:  cluge [ 05 Mar 2005, 07:51 ]
Post subject:  Any Luck
Any luck on the double login issue?
Author:  mvaldez [ 19 Mar 2005, 04:49 ]
Post subject:  I have a clue...
Calo, Dan, Cluge:

I have been having problems replicating this problem, but finally now I can. But I can only replicate this problem with a given browser under a specific condition. So, my question to anyone having this problem:

What browser are you using (please include the version number)?

Regards,

Mario A. Valdez-Ramirez.
Author:  mvaldez [ 19 Mar 2005, 08:37 ]
Post subject:  More questions...
Calo, Dan, Cluge:

Sorry, I forgot to ask,
Version of PHP, web server (Apache, IIS, etc), and server operative system.

Thanks,

Mario A. Valdez-Ramirez.
Author:  crudolphy [ 20 Mar 2005, 17:48 ]
Post subject:  Login in difficulty
Mario I am experiencing the same problem. Following are details:

Have tried with the following browsers:

IE Version 6.0.2800.1106 on Win2K SP4
Mozilla 1.4.1 on Fedora Core 1
Konqueror 3.1.4-4-RedHat on Fedora Core 1

Server is running on Fedora Core 1

Apache 2.0.4.8
MySQL 3.23.58
PHP 4.3.8
phpprojekt 4.2
CMS 0.6.0

I also get the following message displayed on the CMS Home Page:

"Warning mb_strrpos(): Empy haystack in /var/www/html/phprojekt423/cm/display.php"

Doesn't seem to affect anything but again I haven't tried out everything either.

Hope this helps.
Author:  Guest [ 24 Mar 2005, 08:55 ]
Post subject:  Re: More questions...
mvaldez wrote:
Calo, Dan, Cluge:
Sorry, I forgot to ask,
Version of PHP, web server (Apache, IIS, etc), and server operative system.


Browsers: Tested
Firefox 1.0-1.7 on Linux, Windows & Mac
IE 6, IE 5.5
-------------------
Redhat Linux (soon to move to centos 3.4)
Server : httpd-2.0.40-21.17 (i.e. apache 2 series on redhat)
PHP : php-4.2.2-17.12

cluge
Author:  cluge [ 24 Mar 2005, 12:00 ]
Post subject:  Additional notes
The PHPSessid does not change when I login, nore does teh PHPROJEKT cookie values chage.

Aaron
Author:  cluge [ 24 Mar 2005, 13:00 ]
Post subject:  This problem is now fixed
Make the following change in your config.inc.php


// system
$login = "1"; // 1: Login via login.php, 0: Login via index.php

If it is still set at "0" you will have the login issue.

aaron aka cluge
Author:  cluge [ 24 Mar 2005, 13:03 ]
Post subject:  Spoke too soon
Forgot to clear my cache from last login - that didn't fix the problem!!!

Sorry too hasty in my troubleshooting.

cluge
Author:  mvaldez [ 04 Apr 2005, 17:02 ]
Post subject:  Contact me by email.
Calo, Dan, Cluge:

Please contact me by email (mario@mariovaldez.org), I've been unable to replicate this problem, but I have made a patched version that may fix it.


Regards,

Mario A. Valdez-Ramirez.
Author:  Cluge [ 21 Apr 2005, 07:24 ]
Post subject:  Sent e-mail, no reply
I've sent e-mail from 2 different accounts. No bounce, no reply

Cluge
Author:  mvaldez [ 10 May 2005, 00:43 ]
Post subject:  Double-login workaround...
To anybody having the double-login problem (you login in Phprojekt and when selecting the CMS tab you are asked again to login, OR when you logout from an user and login again the CMS thinks you are still logged as the first user), read on.


If you are using Apache and PHP is running as a SAPI module, you can use a .htaccess file to enable the PHP option session.auto_start. It seems that when session.auto_start is disabled, the Phprojekt and CMS module session become dissociated (each start using a different session).

The .htaccess should contain:
Code:
  php_value session.auto_start 1
  php_value output_buffering 16000


Test and tell, please. Also, note that this is a workaround, not the final solution.

Regards,

Mario A. Valdez-Ramirez.
Author:  mvaldez [ 10 May 2005, 03:01 ]
Post subject:  Patched version of the CMS module...
To anybody having the double-login problem, you can now download a patched version of the CMS module (0.6.1) from http://www.mariovaldez.net/software/cm_4p/download.php. This version 0.6.1 only addresses this bug and another minor one.

Please let me know if it works correctly in your installation.


Regards,

Mario A. Valdez-Ramirez.
Author:  cluge [ 10 May 2005, 16:35 ]
Post subject:  Seems to work fine
Yep - that did it

Thank You
cluge
Author:  cluge [ 25 May 2006, 00:47 ]
Post subject:  Re: Tks for sharing, made $1200 so far...
THIS SPAM MESSAGE DELETED BY THE MODERATOR
Page 1 of 1 All times are UTC - 7 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/