Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon5.gif   User/Admin privlege question, posted by Ralph Kuehn on Thu May 20 00:55:51 2004 elogd.cfg_cpy
    icon2.gif   Re: User/Admin privlege question, posted by Stefan Ritt on Fri May 21 14:43:09 2004 
       icon4.gif   Re: User/Admin privlege question, posted by Alexandre Camsonne on Fri Jul 2 15:18:20 2004 
          icon2.gif   Re: User/Admin privlege question, posted by Stefan Ritt on Wed Jul 7 17:43:22 2004 
             icon2.gif   Re: User/Admin privlege question, posted by Alexandre Camsonne on Tue Aug 3 05:31:08 2004 logged.jpgnotlogged.jpgelogd.cfgnotloggedcfg.jpgnotloggedcfgg.jpg
                icon2.gif   Re: User/Admin privlege question, posted by Stefan Ritt on Tue Aug 3 12:46:55 2004 
                   icon2.gif   Re: User/Admin privlege question, posted by Alexandre Camsonne on Tue Aug 3 14:51:34 2004 
                      icon3.gif   Re: User/Admin privlege question, posted by Stefan Ritt on Tue Aug 3 16:34:23 2004 
                         icon7.gif   Re: User/Admin privlege question, posted by Alexandre Camsonne on Tue Aug 3 20:14:55 2004 
Message ID: 567     Entry time: Fri Jul 2 15:18:20 2004     In reply to: 544     Reply to this: 573
Icon: Warning  Author: Alexandre Camsonne  Author Email: camsonne@jlab.org 
Category: Bug report  OS: Linux  ELOG Version: 2.5.2 - 2.5.3 
Subject: Re: User/Admin privlege question 
Hi, 
I also have this problem, when a non admin user logs in he does not have access to
the config file but if he logs out he can then access the config file as non logged
user.
I also tried to upgrade to version 2.5.3 but running under this version does not ask
for passwords so I reverted to 2.5.2.

Besides these few details, your software is great !

Thank you,

Alexandre

> > For some reason if I define a "login user" that is allowed the configure
> > option he is also allowed to change the configuration file. According to the
> > documentation it seems like this should NOT be the case. Any ideas as to
> > what the problem might be? 
> 
> Unfortunately I cannot reproduce your problem. This leaves few possibilites:
> 
> - any login user CAN change his/her full name, email address etc. but only admin
> users can change ALL OTHERS as well. Admin users should see a "change elogd.cfg"
> button on the config page, whil normal users will not
> 
> - are you sure you logged out as admin user and loggin in again as non-admin
> user? Under some circumstances, the browser keeps old cookies which can confuse
> things. Best is if you delete all browser cookies and try again (Tools/Internet
> Options/Delete Cookies in IE).
> 
> - Stefan
ELOG V3.1.5-fe60aaf