Getting Access Denied error when OG group member with "access imce" permission tries to access IMCE. The error is at:

"/imce/browse"

I patched user.module with og_user_roles.user.module.5.3.patch and turned on "Clear the Cache" in OGR settings.

I created this code, but it doesn't work:

// IMCE
if (arg(0) == 'imce' && arg(1) == 'browse') {
$location = 160;
if ($_SESSION['og_last']) {
$gid = $_SESSION['og_last']->nid;
// Set group context.
$group_node = node_load($gid);
og_set_group_context($group_node);
}
}

I get this in the debug file:

2008-01-20 10:53:21 pm 	161 	usadancela 	0 	og_user_roles_all_roles 	160 	group context: 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	imce 	browse 	  	  	Roles Returned: (authenticated user)
2008-01-20 10:53:21 pm 	161 	usadancela 	0 	og_user_roles_all_roles 	160 	group context: 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	imce 	browse 	  	  	Roles Returned: (authenticated user)
2008-01-20 10:53:23 pm 	161 	usadancela 	0 	og_user_roles_all_roles 	1 	group context: 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	node 	384 	  	  	Roles Returned: (authenticated user)

So, the problem is that I can't get the group context from $_SESSION['og_last']->nid, although I *should*. But, nothing is there. Why?

OK, did some more testing. If I click on "Create page" (or, any of the OG "create" links), then click on Image icon, then inside the "Insert/edit image" box click on the "Browse" icon, the correct Browse window does come up. When I click on the "Browse" button from within the "Image/File Browser", I can browse files. But, when I click on "Upload", I get "Page not found" error. In looking at og_user_test debug file on this:

2008-01-21 12:16:02 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	10 	group context: 	  	/node/add/page?gids[]=3647 (http://www.centralavedance.com/node/ognodeadd?type=page&gids[]=3647) 	node 	add 	page 	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:02 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	0 	group context: 3647 	  	/node/add/page?gids[]=3647 (http://www.centralavedance.com/node/ognodeadd?type=page&gids[]=3647) 	node 	add 	page 	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:04 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	132 	group context: 	  	/node/ognodeadd?type=page&gids[]=3647 (http://www.centralavedance.com/node/ognodeadd?type=page&gids[]=3647) 	node 	ognodeadd 	  	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:04 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	132 	group context: 	  	/node/ognodeadd?type=page&gids[]=3647 (http://www.centralavedance.com/node/ognodeadd?type=page&gids[]=3647) 	node 	ognodeadd 	  	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:04 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	0 	group context: 3647 	  	/node/ognodeadd?type=page&gids[]=3647 (http://www.centralavedance.com/node/ognodeadd?type=page&gids[]=3647) 	node 	ognodeadd 	  	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:20 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	160 	group context: 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	imce 	browse 	  	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:20 am 	161 	usadancela 	3647 	og_user_roles_all_roles 	0 	group context: 3647 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	imce 	browse 	  	  	Roles Returned: (authenticated user,GroupMember,AgendaAccess)
2008-01-21 12:16:29 am 	161 	usadancela 	0 	og_user_roles_all_roles 	0 	group context: 	  	/imce/upload (http://www.centralavedance.com/imce/browse) 	imce 	upload 	  	  	Roles Returned: (authenticated user)
2008-01-21 12:16:29 am 	161 	usadancela 	0 	og_user_roles_all_roles 	0 	group context: 	  	/imce/upload (http://www.centralavedance.com/imce/browse) 	imce 	upload 	  	  	Roles Returned: (authenticated user)
2008-01-21 12:16:31 am 	161 	usadancela 	0 	og_user_roles_all_roles 	0 	group context: 	  	/imce/upload (http://www.centralavedance.com/imce/browse) 	  	  	  	  	Roles Returned: (authenticated user)
2008-01-21 12:16:41 am 	161 	usadancela 	0 	og_user_roles_all_roles 	160 	group context: 	  	/imce/browse (http://www.centralavedance.com/modules/tinymce/tinymce/jscripts/tiny_mce...) 	imce 	browse 	  	  	Roles Returned: (authenticated user)

So, it looks like now I'm losing group context on "/imce/upload" .

Changed code to this:

// IMCE
if (arg(0) == 'imce' && (arg(1) == 'browse' || arg(1) == 'upload')) {
$location = 160;
if ($_SESSION['og_last']) {
$gid = $_SESSION['og_last']->nid;
// Set group context.
$group_node = node_load($gid);
og_set_group_context($group_node);
}
}

This appears to work.

Comments

Anonymous’s picture

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.