Skip to content
Permalink
Browse files

fix "You are not permitted to access this page (ChangePassword/view/)"

  • Loading branch information...
vpithart authored and LarsMichelsen committed Oct 9, 2019
1 parent 085ae34 commit e81f2b26e7879fdc0bdb4578fdf7ebf9e7684249
Showing with 11 additions and 2 deletions.
  1. +4 −0 ChangeLog
  2. +7 −2 share/server/core/classes/CorePDOHandler.php
@@ -1,4 +1,8 @@
1.9.15
Core:
* FIX: "You are not permitted to access this page (ChangePassword/view/)" for users (issue #215)

Frontend:
* FIX: Fix IE 11 incompatibility regression introduced with 1.9.13

1.9.14
@@ -63,6 +63,7 @@ public static function initialize_static() {
.'WHERE users2roles."userId" = :id',
'-perm-rename-map' => 'UPDATE perms SET obj=:new_name '.
' WHERE "mod"=\'Map\' AND obj=:old_name',
'-perm-change-act' => 'UPDATE perms SET act=:new_act WHERE mod=:mod and act=:old_act',
'-role-add' => 'INSERT INTO roles (name) VALUES (:name)',
'-role-add-with-id' => 'INSERT INTO roles ("roleId", name) VALUES (:roleId, :name)',
@@ -128,6 +129,10 @@ public static function initialize_static() {
),
'updates' => array(
'1091500' => array(
array('-perm-change-act', array('mod' => 'ChangePassword', 'old_act' => 'change', 'new_act' => '*'))
),
'1080600' => array(
array('-perm-add', array('mod' => 'Url', 'act' => 'view', 'obj' => '*')),
array('-create-pop-roles-perms-3', array(
@@ -462,7 +467,7 @@ public function updateDb() {
try {
ksort(self::$DRIVERS['_common']['updates']);
foreach (self::$DRIVERS['_common']['updates'] as $ver => $queries) {
if (intval($ver) <= $dbVersion)
if (intval($ver) < $dbVersion)
continue;
if (!$this->inTrans) {
@@ -585,7 +590,7 @@ public function createInitialDb() {
$this->queryFatal('-perm-add', array('mod' => 'User', 'act' => 'setOption', 'obj' => '*'));
// Access controll: Change own password
$this->queryFatal('-perm-add', array('mod' => 'ChangePassword', 'act' => 'change', 'obj' => '*'));
$this->queryFatal('-perm-add', array('mod' => 'ChangePassword', 'act' => '*', 'obj' => '*'));
// Access controll: View maps via multisite
$this->queryFatal('-perm-add', array('mod' => 'Multisite', 'act' => 'getMaps', 'obj' => '*'));

0 comments on commit e81f2b2

Please sign in to comment.
You can’t perform that action at this time.