User can login!

Author Message

david e

Tuesday 12 April 2005 3:04:39 pm

I know. Usualy the problem is the other way arround, but now there is a user group (guests) which get their accounts setup with the user/register form.

I don not want these users to be able to login until they get changed to another group (clients).

In site.ini there is no "PolicyOmitList[]=user/login" line. I got rid of the "User * *" policy in the anonymous role.

In vain. Guests can still login. They get a session and show up in the admin's sessions as guests, although they can do nothing. even the thing they are allowed to do.

This is the debug log:

Function required:
Module : user
Function : login
ClassID :
MainNodeID :
Policies that didn't match:

Any hints?

thanks!

http://www.ingent.cat/

Frederik Holljen

Friday 15 April 2005 3:52:06 am

If you remove all rights whatsoever to these users they should not be able to log in. Did you check if this is the case?

david e

Monday 18 April 2005 3:44:08 am

yes, I think this is the case:

1) remove all the rights to the user module and in site.ini policy omit list.

2) login, for instance, to the site admin.

3) as a result: you are allowed to enter (the menus show up) and your user is set as logged in (you are given a session, $current_user.is_logged_in is set)

btw: you can not operate, nor access any other function.

may be a bug or different understanding on wath "log in" means.

http://www.ingent.cat/

Bård Farstad

Wednesday 20 April 2005 12:57:55 am

David,

did you try to add a siteaccess limitation for the user/login function. Here you can enable login to any siteaccess, if you enable login to only the user siteaccess then users should not be able to log in to the admin.

--bård

Documentation: http://ez.no/doc

Powered by eZ Publish™ CMS Open Source Web Content Management. Copyright © 1999-2014 eZ Systems AS (except where otherwise noted). All rights reserved.

eZ debug

Timing: Jan 20 2025 03:14:28
Script start
Timing: Jan 20 2025 03:14:28
Module start 'layout'
Timing: Jan 20 2025 03:14:28
Module start 'content'
Timing: Jan 20 2025 03:14:28
Module end 'content'
Timing: Jan 20 2025 03:14:28
Script end

Main resources:

Total runtime0.0180 sec
Peak memory usage2,048.0000 KB
Database Queries3

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0074 589.1484152.6250
Module start 'layout' 0.00740.0035 741.773439.4453
Module start 'content' 0.01090.0049 781.218893.3203
Module end 'content' 0.01580.0022 874.539134.3047
Script end 0.0180  908.8438 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.002715.0641140.0002
Check MTime0.00137.0979140.0001
Mysql Total
Database connection0.00084.157510.0008
Mysqli_queries0.003519.167430.0012
Looping result0.00000.199610.0000
Template Total0.001910.410.0019
Template load0.00116.014310.0011
Template processing0.00084.324010.0008
Override
Cache load0.00084.395410.0008
General
dbfile0.00031.521180.0000
String conversion0.00000.054240.0000
Note: percentages do not add up to 100% because some accumulators overlap

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1print_pagelayout.tpl<No override>extension/community/design/community/templates/print_pagelayout.tplEdit templateOverride template
 Number of times templates used: 1
 Number of unique templates used: 1

Time used to render debug report: 0.0001 secs