Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: You don't have permission to access this page - editing pic info  (Read 6337 times)

0 Members and 1 Guest are viewing this topic.

jules_b

  • Coppermine newbie
  • Offline Offline
  • Posts: 1

Hi,

I'm using version 1.4.4 with the phpBB bridge. Everything's working lovely apart from this probem:

Members of the Registered group are unable to edit picture titles and descriptions in User Galleries after the photos have been uploaded.

User clicks on their album and clicks on an individual picture. Clicks EDIT FILE INFORMATION and can enter the information. Clicks on APPLY MODIFICATIONS and receives the following error: You don't have permission to access this page.

Same user is able to edit titles and description information by clicking on EDIT FILES next to the album.

I saw this thread but the line causing problems is not commented out in my editpics.php so it can't be that.

http://forum.coppermine-gallery.net/index.php?topic=17802.0

The gallery is at:

http://www.orionmountaineering.com/cpg144/

Grateful for any suggestions.

Jules.

« Last Edit: May 17, 2006, 06:12:21 pm by Nibbler »
Logged

kyle1745

  • Coppermine newbie
  • Offline Offline
  • Posts: 13
Re: You don't have permission to access this page - editing pic info
« Reply #1 on: April 01, 2006, 01:03:30 am »

I am also having the same issue.  I checked the file in link jules_b posted and the line the ref to comment out is not commented in mine.

Any ideas?
Logged

ernesto99

  • Coppermine newbie
  • Offline Offline
  • Posts: 1
Re: You don't have permission to access this page - editing pic info
« Reply #2 on: April 02, 2006, 01:25:49 pm »

I have the same problem but ....

the following setting has effect on this error :
Allow users to retain control over their pics in public galleries

If changed to "yes" the user can edit the file.
« Last Edit: April 02, 2006, 01:42:12 pm by ernesto99 »
Logged

Nibbler

  • Guest
Re: You don't have permission to access this page - editing pic info
« Reply #3 on: April 02, 2006, 03:11:26 pm »

Bug is likely here in editOnePic.php

Code: [Select]
    $result = cpg_db_query("SELECT p.* FROM {$CONFIG['TABLE_PICTURES']} AS p, {$CONFIG['TABLE_ALBUMS']} AS a WHERE a.aid = p.aid AND pid = '$pid'");
    if (!mysql_num_rows($result)) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
    $pic = mysql_fetch_array($result);
    mysql_free_result($result);

    if (!(GALLERY_ADMIN_MODE || $pic['category'] == FIRST_USER_CAT + USER_ID || ($CONFIG['users_can_edit_pics'] && $pic['owner_id'] == USER_ID)) || !USER_ID) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);

The query does not retrieve the category, so the test below fails.

Try changing the p.* to *
Logged

kyle1745

  • Coppermine newbie
  • Offline Offline
  • Posts: 13
Re: You don't have permission to access this page - editing pic info
« Reply #4 on: April 02, 2006, 06:31:00 pm »

From what I can tell this corrects the issue.  Thank you I will have some more users test.
Logged

OutKa5t

  • Coppermine newbie
  • Offline Offline
  • Posts: 5
Re: You don't have permission to access this page - editing pic info
« Reply #5 on: April 27, 2006, 03:53:04 pm »

This fix does indeed cure the problem.

Thanks
Logged

Nibbler

  • Guest
Re: You don't have permission to access this page - editing pic info
« Reply #6 on: May 17, 2006, 06:12:44 pm »

Fixed as of svn revision 3032.
Logged
Pages: [1]   Go Up
 

Page created in 0.03 seconds with 19 queries.