Jump to content
DevFuse Forums
  • Sign in to follow this  

    Form view/submit conflict


    Michael
    • Fixed IP.Board Version: IP.Board 4.2.x

    The view and submit form permissions are conflicted and not working correct. Ref here.

    Manual Patch:

    Open applications/form/sources/Log/Log.php

    Find:

    if( !parent::canCreate( $member, $container, $showError ) )

    Replace With:

    if( ( $container AND !$container->can('view') ) AND !parent::canCreate( $member, $container, $showError ) )

    Find:

    $this->post_key	= isset( $values['post_key'] ) ? $values['post_key'] : md5( uniqid() );

    Add ABOVE:

            if ( !$this->container()->can('add') )
            {
                \IPS\Output::i()->error( 'module_no_permission', '', 403, '' );
            }

    Save.

    Sign in to follow this  


    User Feedback

    Recommended Comments



    Join the conversation

    You can post now and register later. If you have an account, sign in now to post with your account.

    Guest
    Add a comment...

    ×   Pasted as rich text.   Paste as plain text instead

      Only 75 emoji are allowed.

    ×   Your link has been automatically embedded.   Display as a link instead

    ×   Your previous content has been restored.   Clear editor

    ×   You cannot paste images directly. Upload or insert images from URL.


  • Status Definitions

    Pending = We are still working on this report.

    Fixed = The issue has been fixed and the resolution will be available in the next version.

    Closed = Feedback or opinion better posted on our forum for discussion. Also for reports we cannot reproduce or need more information. In this case just add a comment and we will review it again.

     

×
×
  • Create New...