Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

ExactTarget - What's Your Score
  Need Help?  
Professional technical support for DotNetNuke is available from DotNetNuke Corporation.
 


  Ads  
Active Modules -- Active Forums for DotNetNuke
 


  Sponsors  

Meet Our Sponsors

Portal Webhosting - Hosting For Developers
Red-Gate Software
MaximumASP
SourceGear - Tools for Developers
.: CounterSoft :.
telerik
 


DotNetNuke Forums
 
  Forum  General DotNetN...  Configure It! (...  I think I found a bug...
Previous Previous
 
Next Next
New Post 6/29/2008 7:17 PM
Resolved
User is offline kod3brkr
19 posts
testing.acnicholls.com/dotnetnuke
10th Ranked


I think I found a bug... 

If I'm logged in as Site Admin (not super User) and a regular user as well, in two different browser windows (IE7) not tabs...I can give the regular user admin permissions by clicking on the same page for both pages.  I'll mess about some more and see if I can re-create and write down the actual steps, has anyone else noticed this...oh yeah I'm using 4.8.0  OK try this

1) log in as regular user - go to page with forums on

2) open new browser window - login as site admin

3) refresh browser with regular user - BLAM!!  user has page edit permissions (when he shouldn't) 

The modules I'm using are UsersOnline, Forum, Store, and Media.  All the modules are upgraded, but the site is 4.8.0 Core.  Any answers?

You CAN have everything you want in life....You just have to work hard to get it.
 
New Post 6/29/2008 7:25 PM
User is offline Sebastian Leupold
13620 posts
www.deutschnetnuke.de
1st Ranked












Re: I think I found a bug... 

this is natural, since login credentials are stored in a cookie and all instances of the same browser on your machine share the same cookie.

Sebastian Leupold

DeutschNetNuke dnnWerk - The DotNetNuke Experts German DotNetNuke User-Group

DotNetNuke Project UserDefinedTable
DotNetNuke Project Release Tracker
 
New Post 7/2/2008 9:12 PM
User is offline kod3brkr
19 posts
testing.acnicholls.com/dotnetnuke
10th Ranked


Re: I think I found a bug... 

Thanks Sebastian, that makes sense now that I know.  I appreciate the quick answer.

You CAN have everything you want in life....You just have to work hard to get it.
 
New Post 7/3/2008 4:00 AM
User is offline Julian
125 posts
9th Ranked


Re: I think I found a bug... 

I must also add that even though the normal user can see the admin menu's etc. clicking on any of them will bring up a login screen, since the normal user does not have accesss rights to the feature he requested, so even though it does not look pretty, its still secure
 
 Page 1 of 1
Previous Previous
 
Next Next
  Forum  General DotNetN...  Configure It! (...  I think I found a bug...
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.
 


DotNetNuke Modules, Skins, Training and Consulting
If you want DotNetNuke done right then look no further. Developed Solutions provides module development, skin design, user and developer training and consulting. Based in Adelaide, Australia, we offer our services worldwide.
www.developedsolutions.com.au 		Venexus, Inc.
Need custom a custom DotNetNuke module? From module planning to deployment, including training and support, Venexus developers deliver end-to-end web solutions on time and on budget.
www.venexus.com 		Bring2mind
Document Centric DNN Module Solutions
www.bring2mind.net

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP