Small width layout Medium width layout Maximum width layout Small text Medium text Large text
     Search
Downloads Downloads Directory Directory Forums Forums Forge Forge Blogs Blogs        Marketplace Marketplace Careers Program Careers
Community › Forums Register  |  

Maximum ASP
  Ads  
Active Modules -- Active Forums for DotNetNuke
 


  Sponsors  

Meet Our Sponsors

R2integrated - formerly bi4ce
Jango Studios - Skins, Modules and Hosting for DotNetNuke
eUKhost.com is commited to offer exceptional UK Windows Web Hosting solutions with quality 24x7 technical support.Our plans support ASP.Net, ASP, ASP.NET Ajax extensions, XML, MSSQL, MySQL, PHP,DNN, multiple domains and Shared SSL as standard.
SmarterTools
The Official Microsoft ASP.NET Website
Portal Webhosting - Hosting For Developers
 


DotNetNuke Forums
 
  Forum  General DotNetN...  Configure It! (...  I think I found a bug...
Previous Previous
 
Next Next
New Post 6/29/2008 8:17 PM
Resolved
User is offline kod3brkr
19 posts
testing.acnicholls.com/dotnetnuke
10th Ranked


I think I found a bug... 

If I'm logged in as Site Admin (not super User) and a regular user as well, in two different browser windows (IE7) not tabs...I can give the regular user admin permissions by clicking on the same page for both pages.  I'll mess about some more and see if I can re-create and write down the actual steps, has anyone else noticed this...oh yeah I'm using 4.8.0  OK try this

1) log in as regular user - go to page with forums on

2) open new browser window - login as site admin

3) refresh browser with regular user - BLAM!!  user has page edit permissions (when he shouldn't) 

The modules I'm using are UsersOnline, Forum, Store, and Media.  All the modules are upgraded, but the site is 4.8.0 Core.  Any answers?

You CAN have everything you want in life....You just have to work hard to get it.
 
New Post 6/29/2008 8:25 PM
User is offline Sebastian Leupold
16085 posts
www.deutschnetnuke.de
1st Ranked












Re: I think I found a bug... 

this is natural, since login credentials are stored in a cookie and all instances of the same browser on your machine share the same cookie.

Sebastian Leupold

DeutschNetNuke dnnWerk - The DotNetNuke Experts German DotNetNuke User-Group European Network of DotNetNuke Professionals

DotNetNuke Project UserDefinedTable
DotNetNuke Project Release Tracker
 
New Post 7/2/2008 10:12 PM
User is offline kod3brkr
19 posts
testing.acnicholls.com/dotnetnuke
10th Ranked


Re: I think I found a bug... 

Thanks Sebastian, that makes sense now that I know.  I appreciate the quick answer.

You CAN have everything you want in life....You just have to work hard to get it.
 
New Post 7/3/2008 5:00 AM
User is offline Julian
148 posts
9th Ranked


Re: I think I found a bug... 

I must also add that even though the normal user can see the admin menu's etc. clicking on any of them will bring up a login screen, since the normal user does not have accesss rights to the feature he requested, so even though it does not look pretty, its still secure
 
 Page 1 of 1
Previous Previous
 
Next Next
  Forum  General DotNetN...  Configure It! (...  I think I found a bug...
 


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.
 


Venexus, Inc.
Need custom a custom DotNetNuke module? From module planning to deployment, including training and support, Venexus developers deliver end-to-end web solutions on time and on budget.
www.venexus.com 		Bring2mind
Document Centric DNN Module Solutions
www.bring2mind.net 		WEBPC™ DotNetNuke® sites for Small Business
WEBPC™ are internet consultants and web hosters catering to the small business market.
www.webpc.biz

DotNetNuke Corporation   Terms Of Use  Privacy Statement
DotNetNuke®, DNN®, and the DotNetNuke logo are trademarks of DotNetNuke Corporation
Hosted by MaximumASP