Have just had the latest version installed and there appears to be a issue with guest, users and Registered Members.
Users Permissions They have permission to view all post areas but are not able to download, post, PM or view attachments.
Registered Members (subscription) They have access to all areas of the forum and are able to download, post, PM and view all atachments.
The issue since the install of the latest (7.6.2) version is that all guest, Users and Registered Members can view all pdf files and use the pop-out to view and print. Note that Guest and Users are unable to download the pdf files.
Any assistance on how to correct this issued would be appreciated as the subscriptions help pay for hosting and updates to the forum.
Please explain further, as your original message in PT indicated just an issue with Guests being able to view PDFs inline when their permission did not allow for it.
From what it sounds like in your post, you're having more issues than just with PDFs being allowed to be viewed by users without the proper permission.
Regarding the print page, it's simply a cleaned up/optimized version of the post template which is more friendly for printing; there should be a listing of attachments (if applicable) shown with a full link to where the file exists (clicking on these links should send one through the permission matrix for the files). The print template hasn't been updated since v7.6.0.
The issue he is having, is that since PDF files can now be displayed inline, they are not respecting the group permissions setting (just the inline pdf display). But all the other permissions are being respected exactly the same way they were in 761 and prior.
I guess I need to install 7.6.2. Maybe there is a new permission for those files. I see several inline images (JPG) that appears in the post so why not PDF should appear.. If it is just part of the allowed file formats. How would you segregate them?
Will this be a bug? Refresh? Future release? Mod till future release?
Blue Man Group There is no such thing as stupid questions. Just stupid answers
Well, we're going to stay on topic and see why the permission system is allowing guests to see the attachment and patch it in the next release; but we'll need to find the cause first.
It's likely something minor such as a misplacement of a variable in the script.
I think I am on topic. what I am saying is if you view the post as a guest that isaac posted. There are many jpg files that appear inline. As well as the pdf attachment. So what would be the difference if it were a txt file? In 7.6.0 there is not a permission to not allow viewing attachments, just downloading them. So if a guest has view rights to a forum then they can view everything. Including attachments. All you can do is disable downloads.
Unless there is a net new permission in 7.6.2.?????
Does not give a clue that the pdf is following the same permission as the normal attachments.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
This permissions correction will be in the next release version of UBB.threads. If anyone needs this fixed right now and cannot wait until the next release, the fix is simple:
in /scripts/showflat.inc.php FIND
Code
if ($ext == "pdf") {
REPLACE WITH
Code
if ($ext == "pdf" && $userob->check_access("forum", "CAN_DOWNLOAD", $topic_info['FORUM_ID'])) {
Embedding images via the [img] tag is not an attachment.
I guess Gizmo is to busy to read the complete post before he replies. Inline images was just part of my post. But anyway isaac answered the question correctly. It is the "can download attachment permission" that is the issue.
I never knew that permission included viewing.. I guess it makes sense. If you open the attachment then you are actually downloading it.
Thanks Isaac for the proper answer and a interim fix.
Blue Man Group There is no such thing as stupid questions. Just stupid answers
This permissions correction will be in the next release version of UBB.threads. If anyone needs this fixed right now and cannot wait until the next release, the fix is simple:
in /scripts/showflat.inc.php FIND
Code
if ($ext == "pdf") {
REPLACE WITH
Code
if ($ext == "pdf" && $userob->check_access("forum", "CAN_DOWNLOAD", $topic_info['FORUM_ID'])) {
thats all.
Outdoorking - thank you for this
Thank you very much for the quick fix it is really appreciated.