Select the search type
  • Site
  • Web
Search
You are here:  Support/Forums
Support

Bring2mind Forums

Unify permissions on children bug ?
Last Post 09/27/2012 2:24 PM by Peter Donker. 9 Replies.
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
Author Messages
Yann Habrial
New Member
New Member
Posts:28


--
09/19/2012 3:01 PM
Hello Peter,

I have got problems when using "unify permissiosn on children" functionality.

My versions are 06.02.01 for DNN and 6.0.4 for DMX.

Actually even if I check this option, the permissions remain different between the parent folder and the child folders.

Can you reproduce that ?

Thanks for your time,

Nicolas

Yann Habrial
New Member
New Member
Posts:28


--
09/19/2012 4:39 PM
I think the problem comes from the "DMX_UnifyPermissions" stored procedure.

Actually I have a folder (ID 550) which has a child folder (ID 551).

In the SQL procedure the first SELECT doesn't contain the EntryID 551 which explains that it's not upgraded.

SELECT DISTINCT ep.EntryId FROM dbo.DMX_EntryPermissions ep
INNER JOIN dbo.DMX_Permissions pt ON pt.PermissionId=ep.PermissionId
LEFT JOIN dbo.vw_DMX_ActiveUserRoles r ON r.RoleId=ep.RoleId AND r.UserId=@UserId
WHERE pt.PermissionKey='EDIT' AND (ep.UserId=@UserId OR NOT r.UserId IS NULL OR ep.RoleId=-1

This is the corresponding line in DMX_Entries for entryid 551:

SuperUser Account 550 0 NULL 551 Collection 107520 2012-07-10 13:39:25.000 1 NULL 2012-09-19 15:01:44.790 551 NULL 2012-08-30 16:57:12.663 NULL NULL NULL 1 3 NULL 1 NULL NULL 0;550;551; 0 1 0 NULL 0 Documents NULL

I hope this helps.
Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/21/2012 9:54 AM
The unify logic doesn't make all permissions identical as, for instance, files have no ADD permission. So what happens is that the ADD permissions get merged with the EDIT permissions and become EDIT permissions for files. Then the old ADD permissions get passed down to the subfolders.

Peter
Yann Habrial
New Member
New Member
Posts:28


--
09/21/2012 10:53 AM
Hi Peter,

I understand your point but still don't figure why the edit Permissions of my parent folder don't pass down to my subfolder :( (Edit permission in my case)

Do you have an idea ?

Nicolas
Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/21/2012 1:30 PM
Do you have no edit permissions on the subfolder? Note that you will not be passed to the procedure as SuperUser if you are the host user, but as the portal's admin (user id taken from the Portals table).

Peter
Yann Habrial
New Member
New Member
Posts:28


--
09/21/2012 1:37 PM
Yes I confirm that when I try to "Unify Permissions" on the subfolder by checking this box on the parent folder, the rights aren't passed down.
And Yes I try to update this with the host account. Do I have to use the admin portal account ?

Thanks,

Nicolas
Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/21/2012 3:22 PM
Try it with the portal admin account. Same result?

Peter
Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/21/2012 3:23 PM
O, and please confirm that Administrators have edit rights on that child folder.

Peter
Yann Habrial
New Member
New Member
Posts:28


--
09/21/2012 6:29 PM
It works when I log on with an administrator account. ( I precise that the goal of my action was to add Administrators rights on the child folders).

Could it be possible to be able to do the same actions as a host. Indeed I often connect as a host to manage several portals.

Thanks !
Peter Donker
Veteran Member
Veteran Member
Posts:4536


--
09/27/2012 2:24 PM
Hosts are somewhat of an anomaly in DNN in that they are not part of any security roles for a portal. Instead there is a lot of coding in DNN to assure you see the same as an Admin. This would be too costly in terms of performance to implement all the way through DMX. Instead, DMX checks for SuperUser and then assigns the user the UserId of the portal Admin instead. This works unless (a) that value is wrong (i.e. the portal administrator is no longer part of Administrators), or (2) you've switched login in the same session or changed the portal admin in the same session as the current user is cached with your real user id.

Peter
You are not authorized to post a reply.