Issue: Yes Permission Overwritten by Different Never Permission

Issue Tools
- View Changes

January 4, 2017 9:53 AM

fj123

Regular Member

Yes Permission Overwritten by Different Never Permission

Somewhere in the moderator permissions is a permission that blocks the moderator from seeing the Wiki link in the nav bar. I have just about ripped my hair out trying to figure out which permission that is. It is set for them to see the Wiki index and to be able to edit and add new pages etc, but they cant access the Wiki through that nav bar link for some reason. What am I missing?

Issue Details

Issue Number 4870

Issue Type Bug

Project VaultWiki 4.x Series

Category Permissions / Security

Status Fixed

Priority 1 - Security / Login / Data Loss

Affected Version 4.0.13

Fixed Version 4.0.16

Milestone (none)

Software DependencyAny

License TypePaid

Users able to reproduce bug 0

Users unable to reproduce bug 0

Attachments 0

Assigned Users (none)

Tags (none)

January 4, 2017 10:10 AM

fj123

Regular Member

......and then when I finally get the nav bar back for them, then it has somehow disabled their permissions to even see articles, let alone edit them.

Reply
January 4, 2017 10:38 AM

fj123

Regular Member

There is definitely some sort of bug or something because in desperation I finally set all of the moderator permissions to YES. And now the Wiki Link no longer shows in the nav bar and even just using the direct link they don't have permission to access the Wiki.

Reply
January 4, 2017 11:17 AM

pegasus

VaultWiki Team

Please submit a private ticket so we can investigate this for you: https://www.vaultwiki.org/members/?do=newticket

Reply
January 4, 2017 5:22 PM

pegasus

VaultWiki Team

This was definitely a bug. "Never" permissions were not working correctly. Rather than preventing users from ever enjoying a "Yes" answer for a permission question (the expected behavior), it also prevented users from ever enjoying a "Yes" answer for all previous questions under the same heading.

This is fixed on your site and in the next release (4.0.16).

This does not qualify as a security vulnerability because the bug only causes users to lose permissions; there is no "escalation."

Reply
January 4, 2017 5:43 PM

fj123

Regular Member

I sent you a PM, I think it is still there.

Reply

+ Reply

All times are GMT -4. The time now is 4:29 AM.

This site uses cookies to help personalize content, to tailor your experience, and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.

Learn more… Accept Remind me later

Welcome to VaultWiki.org, home of the wiki add-on for vBulletin and XenForo!

Issue: Yes Permission Overwritten by Different Never Permission

Issue Tools