Question Access control problem

Hello,

I have just upgraded to kunena 1.7 from 1.5 and I am having some issues with access control, I was using an extension to achieve this in 1.5 where it worked fine, now it dosen't seem to.. I'm hoping I have just misunderstood the Joomla users group system.

So this is my current set up:

I have a usergroup like so
And I have my categories and forums configured like so

Now a user that I have assigned to Registered and A still is getting access to B, even if I uncheck Registered and only have A checked in (and even if I uncheck public).

Should I be doing something different or is there a real problem here?

Thanks in advance for your help,
Christopher

Here is my configuration settings

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Disabled | FTP layer: Disabled |

This message contains confidential information

htaccess: Exists | PHP environment: Max execution time: 30 seconds | Max execution memory: 128M | Max file upload: 20M

Joomla default template details : masqueradekalmar5a | author: Christopher Karlsson | version: 5a | creationdate: 2011-09-05

Kunena default template details : Reddy | author: gonzaunit | version: 1.6.0 | creationdate: 2010-07-04

Kunena version detailled: Installed version: 1.7.0 | Build: 5135 | Version name: Tale | Kunena detailled configuration:

Warning: Spoiler!

[th]Kunena config settings:[/th]

board_title	Kunena
board_offline	0
board_ofset	0.00
offline_message	<h2>The Forum is currently offline for maintenance.</h2> <div>Check back soon!</div>
enablerss	1
enablepdf	1
threads_per_page	20
messages_per_page	6
messages_per_page_search	15
showhistory	1
historylimit	6
shownew	1
jmambot	0
disemoticons	0
template	Reddy
showannouncement	1
avataroncat	0
catimagepath	category_images/
showchildcaticon	1
annmodid	62
rtewidth	450
rteheight	300
enableforumjump	1
reportmsg	1
username	1
askemail	0
showemail	0
showuserstats	1
showkarma	0
useredit	1
useredittime	0
useredittimegrace	600
editmarkup	1
allowsubscriptions	1
subscriptionschecked	1
allowfavorites	1
maxsubject	50
maxsig	300
regonly	0
changename	0
pubwrite	0
floodprotection	0
mailmod	0
mailadmin	0
captcha	0
mailfull	1
allowavatar	1
allowavatarupload	1
allowavatargallery	0
avatarquality	65
avatarsize	2048
allowimageupload	0
allowimageregupload	1
imageheight	800
imagewidth	800
imagesize	150
allowfileupload	0
allowfileregupload	1
filetypes	txt,rtf,pdf,zip,tar.gz,tgz,tar.bz2
filesize	120
showranking	1
rankimages	1
avatar_src	fb
fb_profile	fb
pm_component	no
userlist_rows	30
userlist_online	1
userlist_avatar	1
userlist_name	1
userlist_username	1
userlist_posts	1
userlist_karma	1
userlist_email	0
userlist_usertype	0
userlist_joindate	1
userlist_lastvisitdate	1
userlist_userhits	1
latestcategory
showstats	1
showwhoisonline	1
showgenstats	1
showpopuserstats	1
popusercount	5
showpopsubjectstats	1
popsubjectcount	5
usernamechange	0
rules_infb	1
rules_cid	1
help_infb	1
help_cid	1
showspoilertag	1
showvideotag	1
showebaytag	1
trimlongurls	1
trimlongurlsfront	40
trimlongurlsback	20
autoembedyoutube	1
autoembedebay	1
ebaylanguagecode	en-us
fbsessiontimeout	1800
highlightcode	0
rss_type	topic
rss_timelimit	month
rss_limit	100
rss_included_categories
rss_excluded_categories
rss_specification	rss2.0
rss_allow_html	1
rss_author_format	name
rss_author_in_title	1
rss_word_count	0
rss_old_titles	1
rss_cache	900
fbdefaultpage	recent
default_sort	asc
alphauserpointsnumchars	0
sef	1
sefcats	0
sefutf8	0
showimgforguest	1
showfileforguest	1
pollnboptions	4
pollallowvoteone	1
pollenabled	1
poppollscount	5
showpoppollstats	1
polltimebtvotes	00:15:00
pollnbvotesbyuser	100
pollresultsuserslist	1
maxpersotext	50
ordering_system	mesid
post_dateformat	ago
post_dateformat_hover	datetime
hide_ip	1
js_actstr_integration	0
imagetypes	jpg,jpeg,gif,png
checkmimetypes	1
imagemimetypes	image/jpeg,image/jpg,image/gif,image/png
imagequality	50
thumbheight	32
thumbwidth	32
hideuserprofileinfo	put_empty
integration_access	joomla
integration_login	joomla
integration_avatar	auto
integration_profile	kunena
integration_private	none
integration_activity	none
boxghostmessage	0
userdeletetmessage	0
latestcategory_in	1
topicicons	1
onlineusers	1
debug	0
catsautosubscribed	0
showbannedreason	0
version_check	1
showthankyou	1
showpopthankyoustats	1
popthankscount	5
mod_see_deleted	0
bbcode_img_secure	text
listcat_show_moderators	1
lightbox	1
activity_limit	0
show_list_time	720
show_session_type	0
show_session_starttime	0
userlist_allowed	0
userlist_count_users	1
enable_threaded_layouts	0
category_subscriptions	post
topic_subscriptions	every
pubprofile	1
thankyou_max	10
email_recipient_count	0
email_recipient_privacy	bcc
email_visible_address
captcha_post_limit	0
recaptcha_publickey
recaptcha_privatekey
recaptcha_theme	white

Third-party components: None

Third-party SEF components: None

Plugins: System - Mootools Upgrade: Disabled | System - Mootools12: Disabled

Modules: None

I am having a similar problem today, trying to make certain parts of my forum accessible to a new user group. So I am watching this space to see a solution.

I have been reading all the forum posts on this subject, some going back 2 years, and there is not a single straight answer anywhere. ArtofUser is not updated for Joomla 1.7 so that is out of the question.

I have made a new User Group in Joomla called Members.

I have 3 forum sections. Registered Users can post and read the first forum. Once they get promoted to Member rank, they should be able to read the other forums.

In the Kunena category manager, I have set the first forum access to Registered (and the secondary user one to Registered as well). The other two categories are set to Member.

That should be that, since Kunena user groups are just cosmetic mostly (except the Admin and Moderator roles).

However, users that are in these groups can still see all the boards, or they can see none of the boards, or unexpected results.

So, its either I am doing something wrong, or there is something wrong in Kunena or Joomla.

Here is my config setting:

Database collation check: The collation of your table fields are correct

Legacy mode: Disabled | Joomla! SEF: Enabled | Joomla! SEF rewrite: Enabled | FTP layer: Disabled |

This message contains confidential information

htaccess: Exists | PHP environment: Max execution time: 60 seconds | Max execution memory: 32M | Max file upload: 20M

Joomla default template details : rt_camber | author: RocketTheme, LLC | version: 1.1 | creationdate: August 5, 2011

Kunena default template details : Blue Eagle (default) | author: Kunena Team | version: 1.7.0 | creationdate: 2011-08-29

Kunena version detailled: Installed version: 1.7.0 | Build: 5135 | Version name: Tale | Kunena detailled configuration:

Warning: Spoiler!

[th]Kunena config settings:[/th]

board_title	Go Rin No Sho
board_offline	0
board_ofset	0.00
offline_message	<h2>The Forum is currently offline for maintenance.</h2> <div>Check back soon!</div>
enablerss	1
enablepdf	1
threads_per_page	20
messages_per_page	6
messages_per_page_search	15
showhistory	1
historylimit	6
shownew	1
jmambot	0
disemoticons	0
template	default
showannouncement	1
avataroncat	1
catimagepath	category_images/
showchildcaticon	1
annmodid	25,60
rtewidth	350
rteheight	250
enableforumjump	1
reportmsg	1
username	1
askemail	0
showemail	0
showuserstats	1
showkarma	1
useredit	1
useredittime	0
useredittimegrace	600
editmarkup	1
allowsubscriptions	1
subscriptionschecked	0
allowfavorites	1
maxsubject	50
maxsig	300
regonly	1
changename	0
pubwrite	0
floodprotection	0
mailmod	0
mailadmin	0
captcha	1
mailfull	1
allowavatar	1
allowavatarupload	1
allowavatargallery	1
avatarquality	75
avatarsize	2048
allowimageupload	0
allowimageregupload	1
imageheight	800
imagewidth	800
imagesize	1500
allowfileupload	0
allowfileregupload	1
filetypes	txt,rtf,pdf,zip,tar.gz,tgz,tar.bz2,torrent
filesize	1024
showranking	1
rankimages	1
avatar_src	fb
fb_profile	fb
pm_component	no
userlist_rows	30
userlist_online	1
userlist_avatar	1
userlist_name	1
userlist_username	1
userlist_posts	1
userlist_karma	1
userlist_email	0
userlist_usertype	0
userlist_joindate	1
userlist_lastvisitdate	1
userlist_userhits	1
latestcategory
showstats	1
showwhoisonline	1
showgenstats	1
showpopuserstats	1
popusercount	5
showpopsubjectstats	1
popsubjectcount	5
usernamechange	0
rules_infb	1
rules_cid	0
help_infb	1
help_cid	0
showspoilertag	1
showvideotag	1
showebaytag	1
trimlongurls	1
trimlongurlsfront	40
trimlongurlsback	20
autoembedyoutube	1
autoembedebay	1
ebaylanguagecode	en-us
fbsessiontimeout	3600
highlightcode	0
rss_type	topic
rss_timelimit	month
rss_limit	100
rss_included_categories
rss_excluded_categories
rss_specification	rss2.0
rss_allow_html	1
rss_author_format	name
rss_author_in_title	1
rss_word_count	0
rss_old_titles	1
rss_cache	900
fbdefaultpage	recent
default_sort	asc
alphauserpointsnumchars	30
sef	1
sefcats	1
sefutf8	1
showimgforguest	1
showfileforguest	1
pollnboptions	4
pollallowvoteone	1
pollenabled	1
poppollscount	5
showpoppollstats	1
polltimebtvotes	00:15:00
pollnbvotesbyuser	100
pollresultsuserslist	1
maxpersotext	50
ordering_system	mesid
post_dateformat	ago
post_dateformat_hover	datetime
hide_ip	1
js_actstr_integration	0
imagetypes	jpg,jpeg,gif,png
checkmimetypes	1
imagemimetypes	image/jpeg,image/jpg,image/gif,image/png
imagequality	50
thumbheight	32
thumbwidth	32
hideuserprofileinfo	put_empty
integration_access	auto
integration_login	auto
integration_avatar	auto
integration_profile	auto
integration_private	auto
integration_activity	auto
boxghostmessage	0
userdeletetmessage	0
latestcategory_in	1
topicicons	1
onlineusers	1
debug	0
catsautosubscribed	0
showbannedreason	0
version_check	1
showthankyou	1
showpopthankyoustats	1
popthankscount	5
mod_see_deleted	1
bbcode_img_secure	text
listcat_show_moderators	1
lightbox	1
activity_limit	0
show_list_time	720
show_session_type	0
show_session_starttime	0
userlist_allowed	1
userlist_count_users	1
enable_threaded_layouts	0
category_subscriptions	post
topic_subscriptions	every
pubprofile	0
thankyou_max	10
email_recipient_count	0
email_recipient_privacy	bcc
email_visible_address
captcha_post_limit	2
recaptcha_publickey	6Ldy8LwSAAAAAH8Z5-omb6nxJpvl72wO1N5-a_w4
recaptcha_privatekey	6Ldy8LwSAAAAAOxxRyV7hkvFIXTyvFlDaf79FRY1
recaptcha_theme	clean

Third-party components: UddeIm 2.5

Third-party SEF components: None

Plugins: System - Mootools Upgrade: Disabled | System - Mootools12: Disabled | Kunena Search 1.7.0

Modules: Kunena Search 1.7.0

Your settings should work -- just remember that currently admins can see it all.

Also note that Joomla stores group information into session, so you cannot use one user to test those -- or at least you need to log out between tests.

I have 3 PC's and 3 accounts to test it on. Also phoned up someone and got them to test it. Also I tried logging out, didn't seem to work either.

Just posted an announcement though, for feedback from other users, just in case. I will let you know the outcome.

@Jiminimonka: Instructions written 2 years ago are no good on Joomla 1.7.

I need to reproduce this issue locally in order to see if there's something wrong in permission handling. The code itself is very simple and seems to be OK..

Matias wrote: @Jiminimonka: Instructions written 2 years ago are no good on Joomla 1.7.

:silly:

OK, so I did some testing with other users. They can all see the forums OK once the rank is set to Member, but if I demote them back to registered, they cant see the forums. When I then re-promote them back to Member rank, they are still seeing the same thing as Registered users only. I fixed one user by making him a Moderator in the forums, taking Moderator away and it remains fixed.

Each time I changed his permissions he logged out and reload the page and logged back in again.

The other user was Member rank, I demoted him to Registered, and then back to Member and he still has Registered priveleges.

Oh, I totally forgot that in Kunena 1.6 you need to sync users every time you change users access and he has been logged in. This is because it caches users for session length.. We have changed that behavior in K2.0, which has now session based caching like Joomla 1.7.

User will get the right permissions in a few hours.

OK, so its just a timing thing? Good to hear. Thanks Matias.