Permissions problem after update to 2.3.2

134 Posts

itWillBeOk Reply #1, 11 years, 8 months ago

After updating a site from 2.2.14 to 2.3.2 I'm experiencing a problem in the manager.
When a user with a restricted ACL opens a resource to edit, a pop up with an error message appears:

Code: 200 OK
{"success":false,"message":"Permission denied!","total":0,"data":[],"object":[]}

This seems to be the result of this call to connectors:

HTTP_MODAUTH - modx54c.....
action - system/derivatives/getList
class - modResource
id - modDocument
skip - modXMLRPCResource

This actually happened on another update, too.

I have absolutely no idea where to start looking. So before I spend the next hours with searching, maybe someone has an idea, what this could be connected to? That would be a great help.

This question has been answered by MathiasD. See the first response.

@itWilllBeOK

discuss.answer

112 Posts

Mathias Dannevang Reply #2, 11 years, 8 months ago

That looks for the "class_map" permission:

Ln 14:
https://github.com/modxcms/revolution/blob/master/core/model/modx/processors/system/derivatives/getlist.class.php

Does the user have that permission?

Mathias Dannevang | Webdesigner at dannevang.org | Tweets @dannevang

134 Posts

itWillBeOk Reply #3, 11 years, 8 months ago

Now she has.

Thank you! I didn't know that existed. Did not seem to matter in 2.2.x either.
Hours saved - I think I will do something fun now.

@itWilllBeOK

Answered Permissions problem after update to 2.3.2