You don't have permission to access this page - editing pic info You don't have permission to access this page - editing pic info
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

You don't have permission to access this page - editing pic info

Started by jules_b, March 28, 2006, 02:29:58 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

jules_b

Hi,

I'm using version 1.4.4 with the phpBB bridge. Everything's working lovely apart from this probem:

Members of the Registered group are unable to edit picture titles and descriptions in User Galleries after the photos have been uploaded.

User clicks on their album and clicks on an individual picture. Clicks EDIT FILE INFORMATION and can enter the information. Clicks on APPLY MODIFICATIONS and receives the following error: You don't have permission to access this page.

Same user is able to edit titles and description information by clicking on EDIT FILES next to the album.

I saw this thread but the line causing problems is not commented out in my editpics.php so it can't be that.

http://forum.coppermine-gallery.net/index.php?topic=17802.0

The gallery is at:

http://www.orionmountaineering.com/cpg144/

Grateful for any suggestions.

Jules.


kyle1745

I am also having the same issue.  I checked the file in link jules_b posted and the line the ref to comment out is not commented in mine.

Any ideas?

ernesto99

I have the same problem but ....

the following setting has effect on this error :
Allow users to retain control over their pics in public galleries

If changed to "yes" the user can edit the file.

Nibbler

Bug is likely here in editOnePic.php


    $result = cpg_db_query("SELECT p.* FROM {$CONFIG['TABLE_PICTURES']} AS p, {$CONFIG['TABLE_ALBUMS']} AS a WHERE a.aid = p.aid AND pid = '$pid'");
    if (!mysql_num_rows($result)) cpg_die(CRITICAL_ERROR, $lang_errors['non_exist_ap'], __FILE__, __LINE__);
    $pic = mysql_fetch_array($result);
    mysql_free_result($result);

    if (!(GALLERY_ADMIN_MODE || $pic['category'] == FIRST_USER_CAT + USER_ID || ($CONFIG['users_can_edit_pics'] && $pic['owner_id'] == USER_ID)) || !USER_ID) cpg_die(ERROR, $lang_errors['access_denied'], __FILE__, __LINE__);


The query does not retrieve the category, so the test below fails.

Try changing the p.* to *

kyle1745

From what I can tell this corrects the issue.  Thank you I will have some more users test.

OutKa5t