Support Area

Hello Johan, I believe this will relate to ACL (Access Control List) which you will find on the SobiPro control panel on your left. Click on rules and then click on your section to adjust the rules. Hope this helps.

Hello Dettmer,
Indeed I have a problem with the ACL.
But does anyone know what's the rules in order to prohibit any "simple" user (without any registration) to edit any entries ?
Greeting

Here what I have in ACL :

Rule name: "Registred"
Affected user groups : registered
Affected Sections: annuaire (directory)
Fronted Permissions:
Section
> access any
Category
> access any
Entry
> access any valid
> add own
> edit own

Rule name: "SEO système"
Affected user groups : Regular visitor (unregistered)
Affected Sections: annuaire (directory)
Fronted Permissions:
Section
> access any valid
Category
> access any valid
Entry
> access own unpublishided
> publish own
Review
> add own
> see valid

Rule name: "Membres"
Affected user groups : Regular visitor (unregistered)
Affected Sections: Membres (directory)
Fronted Permissions:
Section
> access any valid
> use search function
Category
> access any valid
Entry
> access any valid
> add own



I don't understand where is my problem

Any help ?

up ?

Have a great day ^^

Dettmer wrote:

Hello Johan, I believe this will relate to ACL (Access Control List) which you will find on the SobiPro control panel on your left. Click on rules and then click on your section to adjust the rules. Hope this helps.

Hi

I'm sorry, but do you have any more information ?
Thanks for all

Greeting ^^

Hello Johan, from what I'm seeing I cant work out your problem. I have uploaded an image with Regular visitor (unregistered) rules that work fine on my website.

In reply to your email:

Johan Chauvet wrote:
Can I ask you where to tell you a "maybe" bug ?
If you take a look here :
https://www.sigsiu.net/support/community-area/add-edit-entries-by-anyone
You may see that I encountered a bug, which let any visitor (unregistred user) to edit any entries !!
Thanks

This is not a bug.

Johan Chauvet wrote:
Rule name: "SEO système"
Affected user groups : Regular visitor (unregistered)
Affected Sections: annuaire (directory)
Fronted Permissions:
Entry
> access own unpublishided
> publish own

You give guests (unregistered users) the right to access unpublished entries and publish entries.

Remove these rights. If unregistered users can still add entries, report it in the bug tracker: https://code.sobi.pro

Hello Sigrid.
Thanks for you reply.
Unfortunately, this doesn't work.
In order to test the changes, I disable my all 4 rules in the ACL section.
And I also empty the cache (I'm using cloudflare).
But if you go to the site, it's still possible to edit entries
http://www.seo-systeme.fr/extra/annuaire/122-hades-business-center.html

I will open a bug so ....

Bug 1793 opened yesterday.

I re-opened the bug this morning, since someone closed it as "not a bug" !!
:s

Hello,

So the guy at the bug tracker want me to pay for an individual support ??!

So I spent the last hour to recover an old backup. :

Take a look here :

NEW VERSION :

In this one, anyone can edit any entries

http://preprod.seo-systeme.fr
Joomla: 3.6.5
Sobipro : 1.3.3 [Eagle]
PHP 7.0.15
http://preprod.seo-systeme.fr/phpinfo.php

OLD VERSION :

Here it's not possible, for visitors, to edit any entries !

http://seo-systeme.fr/
Joomla: 3.4.8
Sobipro: 1.1.13 [Budgie]
Php : 5.6.30
http://www.seo-systeme.fr/phpinfo.php

Like you can see, I only upgrade Joomla and php 7, in order to use your last version.

I didn't do anything else .

How can you explain this ... ?

Help, please

Johan Chauvet wrote:
So the guy at the bug tracker want me to pay for an individual support ??!

The guy at the bug tracker also told you that if it is really a bug in SobiPro you will get the money back.

This is a really fair offer for free of charge open source software!

Hello Sigrid,
Sorry for my last message.
I will take the offer, thanks

I hope it's really not a bug.

Greeting

Hello,

I make some others trials.

A friend, developer, analyzed my two sites a bit.

In the production version, the component does not have an add / delete / edition rights configuration file ... whereas in the new version it looks like you have added one.

Which implies therefore that you added functions in the component to manage these rights and what I tell myself is that on this "detail" page of an entry (http: //preprod.seo-systeme. fr / extra / directory / 102-think-tank-g-nova.html), this must be (maybe) incorrectly set in the code

Or there is a kind of conflict between your code and joomla, which may explain the fact that one has access to the edition of a file ...

On your site, you indicate that this ACL management is present since 1.3.2.
Now my version in production is in 1.1.13 therefore lower:
Https://www.sigsiu.net/center/applications/5-acl-override-application

So in my opinion this comes from this new feature that is poorly managed from the detail record, maybe.

Could you test an update of component 1.1.13 directly to your latest version?
Without making any intermediate updates, I make it clear.

Thanks