Security issue. Anonymous user can access the module/view that under admin interface

Next topic

Author	Message
Bill2011 Du	Wednesday 04 May 2011 8:13:50 am I have a new module/view that should only be accessed by admin. I confirm i don't change anything in my siteaccess setting : RoleSettings. A start, all things were perfect , but i found this module/view can be accessed by anonymous users after some time. I checked my siteaccess setting files, the RoleSettings[] has been modified. The following PolicyOmitList[] data was added: [RoleSettings] PolicyOmitList[]=newmodule/list I found the RoleSettings[] was rewrited when i did something in Setup/Ini-setting/site.ini from admin interface. I don't want my private module or view be accessed by anonymous users, please help me!! Please help to stop that my private module or view be rewirted into PolicyOmitList[]. Thank you!
Ivo Lukac	Wednesday 04 May 2011 9:10:48 am For disable anonymous access just comment the line with hash and clear ini cache: #PolicyOmitList[]=newmodule/list But the main question is where did this line come from if you didn't write it. That is a mystery. http://www.linkedin.com/in/ivolukac http://www.netgen.hr/eng/blog http://twitter.com/ilukac
Bill2011 Du	Friday 06 May 2011 1:13:45 am Thanks, Ivo Lukac . It was rewrited after i edited the PolicyOmitList parameter of Setup/Ini-setting/site.ini form admin interface. Is it means all module or view will wirte into PolicyOmitList parameter when edit the PolicyOmitList parameter of Setup/Ini-setting/site.ini form admin interface?
Ivo Lukac	Friday 06 May 2011 1:19:29 am " Thanks, Ivo Lukac . It was rewrited after i edited the PolicyOmitList parameter of Setup/Ini-setting/site.ini form admin interface. Is it means all module or view will wirte into PolicyOmitList parameter when edit the PolicyOmitList parameter of Setup/Ini-setting/site.ini form admin interface? " Of course it does. It is the same thing. Admin interface is used to edit all ini files without the need to open files directly... http://www.linkedin.com/in/ivolukac http://www.netgen.hr/eng/blog http://twitter.com/ilukac

eZ debug

Timing:	Jan 18 2025 02:20:58
Script start
Timing:	Jan 18 2025 02:20:58
Module start 'layout'
Timing:	Jan 18 2025 02:20:58
Module start 'content'
Timing:	Jan 18 2025 02:20:59
Module end 'content'
Timing:	Jan 18 2025 02:20:59
Script end

Main resources:

Total runtime	0.7233 sec
Peak memory usage	4,096.0000 KB
Database Queries	60

Timing points:

Checkpoint	Start (sec)	Duration (sec)	Memory at start (KB)	Memory used (KB)
Script start	0.0000	0.0045	589.5234	152.6875
Module start 'layout'	0.0045	0.0029	742.2109	39.5625
Module start 'content'	0.0073	0.7144	781.7734	550.5469
Module end 'content'	0.7217	0.0015	1,332.3203	12.0625
Script end	0.7233		1,344.3828

Time accumulators:

Accumulator	Duration (sec)	Duration (%)	Count	Average (sec)
Ini load
Load cache	0.0031	0.4260	16	0.0002
Check MTime	0.0013	0.1742	16	0.0001
Mysql Total
Database connection	0.0005	0.0691	1	0.0005
Mysqli_queries	0.6733	93.0898	60	0.0112
Looping result	0.0005	0.0737	58	0.0000
Template Total	0.6950	96.1	2	0.3475
Template load	0.0020	0.2760	2	0.0010
Template processing	0.6930	95.8050	2	0.3465
Template load and register function	0.0001	0.0183	1	0.0001
states
state_id_array	0.0006	0.0839	1	0.0006
state_identifier_array	0.0016	0.2180	2	0.0008
Override
Cache load	0.0017	0.2351	28	0.0001
Sytem overhead
Fetch class attribute can translate value	0.0006	0.0785	2	0.0003
Fetch class attribute name	0.0009	0.1290	5	0.0002
XML
Image XML parsing	0.0007	0.0910	2	0.0003
class_abstraction
Instantiating content class attribute	0.0000	0.0015	6	0.0000
General
dbfile	0.0008	0.1122	17	0.0000
String conversion	0.0000	0.0011	4	0.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

Usage	Requested template	Template	Template loaded
1	node/view/full.tpl	full/forum_topic.tpl	extension/sevenx/design/simple/override/templates/full/forum_topic.tpl
4	content/datatype/view/ezxmltext.tpl	<No override>	extension/community_design/design/suncana/templates/content/datatype/view/ezxmltext.tpl
6	content/datatype/view/ezxmltags/paragraph.tpl	<No override>	extension/ezwebin/design/ezwebin/templates/content/datatype/view/ezxmltags/paragraph.tpl
1	content/datatype/view/ezxmltags/line.tpl	<No override>	design/standard/templates/content/datatype/view/ezxmltags/line.tpl
2	content/datatype/view/ezimage.tpl	<No override>	extension/sevenx/design/simple/templates/content/datatype/view/ezimage.tpl
1	content/datatype/view/ezxmltags/quote.tpl	datatype/ezxmltext/quote.tpl	extension/ezwebin/design/ezwebin/override/templates/datatype/ezxmltext/quote.tpl
1	print_pagelayout.tpl	<No override>	extension/community/design/community/templates/print_pagelayout.tpl
Number of times templates used: 16 Number of unique templates used: 7

Time used to render debug report: 0.0001 secs