Fixed
FS#1618 permissions for user_name with '_' char in ACL doesn't work
ACL & Authentication
-
2009-02-20 gandalf
I have problem adding permissions to user_name for user:user_space:*
in acl.auth.php
line:
user:user_space:* user_name 2
is not working (user have no rights to user:user_space:*)
while
user:user_space:* @user_group 2
for user_name belonging to @user_group is working ok -
2009-04-13 izmestev
It happens because the character "_" in the username is converted to hexadecimal form (%5F) before the ACL checking.
acl.auth.php should look like:
user:user_space:* user%5Fname 2
>user:user_space:* @user_group 2
>for user_name belonging to @user_group is working ok
This doesn't work in my case. -
2009-04-13 izmestev
sorry, there was a mistake
acl.auth.php should look like:
user:user_space:* user%5fname 2 -
2009-07-22 thewild
Same problem here.
We use ad authentication. All of our user names have underscores and I cannot set ACL for them.
Setting ACL for groups works fine. -
2009-07-23 thewild
Sorry, forgot to mention that even though the underscore IS converted to %5f in acl.auth.php, the users with underscores in their name have no permission. -
2009-07-25 ach
I just tested development and 2009-02-14 version with plain auth. When I use the ACL manager, the acl.auth.php gets populated correctly (using "test%5fuser"). And with "test_user" I can login and access the according pages without a problem.
Make sure you don't write "test%5Fuser" with a capitale F. Or better: Use the ACL manager. -
2009-07-25 ach
The problems with the ad auth module might come from that module and not from DokuWiki!?
Try the latest development version of DokuWiki which comes bundled with an ad auth module. -
2009-07-26 andi
Please report back if Anika's comment (usinf %5f instead of %5F) solved the problem. -
2009-07-27 thewild
In my case, underscores are already correctly written in lower case (%5f) in acl.auth.php.
I only use the ACL UI, I just checked in the config file.
I upgraded to the latest nightly build (as of today), and it does not help.
First, whenever I enter a username in the search field of the ACL page, or whenever I select a user in the list of ACLs, I get the error :
Warning: in_array() [function.in-array]: Wrong datatype for second argument in D:\wwwroot\DokuWiki\inc\auth\ad.class.php on line 153
Then if I give permissions to a "normal" user (named 'demo' in my case), it works, I immediately see in it on the ACL page :
Permissions actuelles de l'utilisateur demo sur la catégorie test: Lecture, Écriture, Création, Télécharger, Effacer.
(sorry, it's in French but I think you got it)
Same thing with an "underscore" user ('test_test' in my case) does not work :
Permissions actuelles de l'utilisateur test_test sur la catégorie test: Aucune.
I'd be happy to help you debug this, but I checked the code and have no idea where to start. -
2009-07-27 thewild
FYI, i tried with the latest adLDAP.php from adldap.sourceforge.net (version 3.2), it still doesn't work. -
2009-07-28 ach
Just for the record, here is someone having the same problem (with AD as well): http://forum.dokuwiki.org/thread/4027 -
2009-07-28 thewild
It's me.
Should have picked the same pseudonym I guess. -
2009-11-28 andi
I just checked this bug with OpenLDAP and a current devel snapshot and cannot reproduce it. I don't have ways to check with the AD backend, but there shouldn't be any differences in ACL handling. So I assume this fixed in current devel. - Related tasks:
