FAQ Overview

[seri]

Hi
I found that "FAQ Overview" at footer of the pages,All FAQ things are shown unless login.
So guest users can see all FAQs.

[Thorsten]

Hi,

which permissions did you set?

bye
Thorsten

[seri]

Hi,
I set "medium" for "Permission Level".

[Thorsten]

Hi,

here's the issue: https://github.com/thorsten/phpMyFAQ/issues/1179

bye
Thorsten

[Thorsten]

Hi,

fixed in 2.9.2. Thanks!

bye
Thorsten

[seri]

I upgraded 2.9.2 today and found that it was not fixed yet,
and more, Each "Last update" date are all "1970-01-01 09:00" .

[Thorsten]

Hi,

will check it again, re-opened the issue: https://github.com/thorsten/phpMyFAQ/issues/1179

bye
Thorsten

[Thorsten]

Hi,

I can confirm the date issue, but the permissions are working for me.

bye
Thorsten

[seri]

Here shows what i see.
I'm not loged in, so i can not see the FAQ.

pic1.jpg

But I clicked FAQ Overview, I can see it.

pic2.jpg

[ndc]

Same thing happens here. Anonymous users can see all FAQs (regardless of Group/User permissions) by clicking on "FAQ Overview".

For the time being, I re-pointed the "FAQ Overview" link by modifying index.php

Using phpMyFAQ 2.9.2, Active Directory and "medium" Permission level. Recently upgraded from 2.8.27.

[Thorsten]

Hi,

should they see nothing?

bye
Thorsten

[ndc]

I am not sure about what "FAQ Overview" should return but Anonymous should definitely not see the FAQs he is not authorized to see
When Anonymous tries to access:

• http://FAQ/index.php?action=show&cat=18 => no permissions in place and access granted
• http://FAQ/index.php?action=show&cat=19 => permissions in place and redirection to list of "open" Categories
• http://FAQ/index.php?action=artikel&id=125 => no permissions in place and access granted
• http://FAQ/index.php?action=artikel&id=126 => permissions in place and access denied

this is all working as expected

"FAQ Overview" instead seems to ignore permissions and shows ALL FAQs, with a "Last update: 1970-01-01 01:00" label

[Thorsten]

Hi,

okay, thanks, I will check it. The date issue is already fixed for 2.9.3.

bye
Thorsten

[seri]

I upgraded to 2.9.3 and The date is fixed,but the permissions are not fixed.
Here are debug messages.

phpMyFAQ notice [8]: Undefined variable: currentUser in /var/www/html/faq/overview.php on line 37

phpMyFAQ notice [8]: Undefined variable: currentGroups in /var/www/html/faq/overview.php on line 38

phpMyFAQ recoverable error [4096]: Argument 1 passed to PMF_Faq::setGroups() must be of the type array, null given, called in /var/www/html/faq/overview.php on line 38 and defined in /var/www/html/faq/inc/PMF/Faq.php on line 159

[Thorsten]

Hi,

will be fixed with 2.9.4, released in a couple of minutes.

bye
Thorsten