Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only guests can actually guest only pages, logged in users are denied access incorrectly #3510

Closed
ddb4github opened this issue Apr 27, 2020 · 0 comments
Labels
bug Undesired behaviour unverified Some days we don't have a clue

Comments

@ddb4github
Copy link
Contributor

Describe the bug

Normal user can not access guest-reachable page, both of $guest_account = true or Settings->Guest User privileged.

To Reproduce

Steps for $guest_account case

  1. Go to User Management
  2. Create a user graph with permission "Console Access" and "View Graphs" only
  3. Logout
  4. Directly access cacti/reports_user.php by address bar
  5. Browser show page Reports [User Level] content
  6. Login with pre-created user graph, browser show Console and Graphs top-tab
  7. Directly access cacti/reports_user.php by address bar again
  8. Browser show Permission Denied

Expected behavior

Normal User can access any $guest_account enabled page, and Settings->Guest User privileged pages.

@ddb4github ddb4github added bug Undesired behaviour unverified Some days we don't have a clue labels Apr 27, 2020
ddb4github pushed a commit to ddb4github/cacti that referenced this issue Apr 27, 2020
@netniV netniV closed this as completed Apr 29, 2020
@netniV netniV changed the title Normal user can not access guest-reachable page Only guests can actually guest only pages, logged in users are denied access incorrectly May 3, 2020
@github-actions github-actions bot locked and limited conversation to collaborators Aug 2, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Undesired behaviour unverified Some days we don't have a clue
Projects
None yet
Development

No branches or pull requests

2 participants