Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: General Users have Admin Rights?!?!  (Read 7026 times)

0 Members and 1 Guest are viewing this topic.

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
General Users have Admin Rights?!?!
« on: August 19, 2005, 05:17:24 am »

OK, this is a problem...

(http://www.cyberpawz.com/images/ScreenShot.jpg)

This is from an end users telling me she has authorization to ban users.  She doesn't have administrator rights, no one except I do... What in god's name is going on, and how can I fix this.  This is a very, very big problem that needs to be fixed before some immature person on the site realizes this and may not be as giving as this person who told me about this, and decide to delete people on purpose.
Logged

Tranz

  • Dev Team member
  • Coppermine addict
  • ****
  • Country: 00
  • Offline Offline
  • Gender: Female
  • Posts: 6149
Re: General Users have Admin Rights?!?!
« Reply #1 on: August 19, 2005, 06:32:41 am »

Log in as admin and go through the users list to see what they are assigned to. Also, change your admin password to be on the safe side. Do you have the latest version, 1.3.3?
Logged

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
Re: General Users have Admin Rights?!?!
« Reply #2 on: August 19, 2005, 07:03:42 am »

Log in as admin and go through the users list to see what they are assigned to. Also, change your admin password to be on the safe side. Do you have the latest version, 1.3.3?

Yes, I have 1.3.3...

Everyone except a handful of people are Registered users... everyone else is a specialized group, which has no privileges whatsoever.

Oh, and I've already changed my password, it doesn't matter... I have a test account there, and even the test account has admin rights.
Logged

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
Re: General Users have Admin Rights?!?!
« Reply #3 on: August 19, 2005, 07:11:34 am »

Oh, BTW here is the test account screen shot...

(http://www.cyberpawz.com/images/problem1.jpg)
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: General Users have Admin Rights?!?!
« Reply #4 on: August 19, 2005, 07:38:40 am »

afaik you have heavily modified your coppermine install. Roll back the modifications you have applied, I'm sure that this whacky behaviour will go away then. Please post a link to your site and a non-admin test user account as well.
Logged

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
Re: General Users have Admin Rights?!?!
« Reply #5 on: August 19, 2005, 07:54:01 am »

afaik you have heavily modified your coppermine install. Roll back the modifications you have applied, I'm sure that this whacky behaviour will go away then. Please post a link to your site and a non-admin test user account as well.

Actually I haven't done anything to the coppermine setup period... I took it out of the box per say and used it... otherwise it's been a standard setup...

And for rolling back the modifications, how do I do that?

Oh, and I can't post a link here to the site, for it seems no matter who registers they become a moderator... (I personally just set up a new user and they have admin privileges without being an admin)
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: General Users have Admin Rights?!?!
« Reply #6 on: August 19, 2005, 07:59:27 am »

then send me a PM with the link and an actual admin account please.
Logged

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
Re: General Users have Admin Rights?!?!
« Reply #7 on: August 20, 2005, 04:39:46 pm »

Any updates? I really would like to know if this is something that I need to edit inside the database or not.
Logged

Cyberpawz

  • Coppermine frequent poster
  • ***
  • Offline Offline
  • Posts: 122
Re: General Users have Admin Rights?!?!
« Reply #8 on: September 17, 2005, 04:35:49 pm »

Ok, this is getting annoying, I've not heard a thing, and the bug is still here... even after the last patch... any help would be appreciated Gau.
Logged

Nibbler

  • Guest
Re: General Users have Admin Rights?!?!
« Reply #9 on: September 17, 2005, 04:45:25 pm »

Perhaps he is busy. Feel free to PM me a link and FTP login if you would be happy for me to investigate.
Logged
Pages: [1]   Go Up
 

Page created in 0.022 seconds with 19 queries.