Issue: Cannot Grant Edit Permissions to non-standard usergroup

Issue Tools
- View Changes

November 18, 2016 9:28 PM

Vilandra

New Member

Cannot Grant Edit Permissions to non-standard usergroup

Running XF 1.5.11 and VaultWiki 4.0.15 Patch Level 1 (was happening at least in 4.0.14 also)

I have a secondary usergroup that I want to use to grant wiki editing permissions to.

Even with all Wiki permission settings set to Yes for that usergroup, its members cannot see the edit tab on Wiki pages.

The only ways I have been able to give that usergroup editing rights are by either adding them to the Administrator usergroup (which has all Yes permissions for the Wiki) as a secondary usergroup or by switching "Can edit existing wiki pages?" to yes for their primary usergroup (Registered). I have nothing set to "Never" in Wiki permissions. So it seems like it's only having issues with secondary usergroups that are not the default.

I don't really want to allow all registered members access to edit the wiki. Could there be something I'm missing? Thank you!

(Also, a strange thing is, if I use the Test Permissions feature with a member of that usergroup, I CAN see the Edit tab. But if I actually log in to the account, I cannot see it.)

Issue Details

Issue Number 4801

Issue Type Bug

Project VaultWiki 4.x Series

Category Permissions / Security

Status Working as Designed

Priority 5 - Minor Bugs / Small Tweaks

Affected Version 4.0.15

Fixed Version (none)

Milestone (none)

Software DependencyXenForo 1.x

License TypePaid

Users able to reproduce bug 0

Users unable to reproduce bug 0

Attachments 0

Assigned Users (none)

Tags (none)

November 19, 2016 10:13 AM

pegasus

VaultWiki Team

Go to Wiki Admin Panel > Permissions > User Access Masks. Enter the name of a user who is affected by the issue above. In the second column (Not Set), it should list the current permissions for that user. Hover over the value for "Can edit existing wiki pages?" and the tooltip should tell you where it is inheriting from.

Reply
November 20, 2016 11:18 AM

Vilandra

New Member

So, even though I have the secondary usergroup "Can edit existing wiki pages?" set to Yes, when I look at the access masks for one of the users in the secondary usergroup, it shows "Not Set (No)".

I have to change the primary usergroup permissions to Yes for the access masks to change to Not Set (Yes).

Reply
November 20, 2016 5:30 PM

pegasus

VaultWiki Team

Is the secondary usergroup you are talking about also set as the Wiki Moderator group? If it is, the behavior is expected. A user only gains permissions from this group if they are actually assigned as a moderator to that part of the wiki. If they are not assigned as a moderator, the user's permissions from this group are treated as Not Set.

If you want to grant permissions via a secondary usergroup, you should use a different usergroup that is not used for admins, moderators, or guests.

Otherwise:

Is there a tooltip available for the "Not Set (No)"? Is it inheriting "No" (red underline), or using a default value of No?

If it is using a default value of No, then there is a possibility secondary usergroups are not being used. This would be a major security issue. However, I cannot reproduce such a problem on my test site - my test user is correctly earning permissions that are only set in the secondary group.

EDIT: This does not affect your situation, but I have fixed a bug for the next release where a Not Set value from global usergroup permissions was incorrectly labeled as an inherited No on the access mask page.

Reply
November 22, 2016 4:58 PM

Vilandra

New Member

I did set it as the Wiki Moderator group. My bad - I apologize. That solved it.

Reply

+ Reply

All times are GMT -4. The time now is 10:33 AM.

This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Learn more… Accept Remind me later

Welcome to VaultWiki.org, home of the wiki add-on for vBulletin and XenForo!

Issue: Cannot Grant Edit Permissions to non-standard usergroup

Issue Tools