Hello,
if I try to use Colorbox+Colorbox Node to show content with popup it's gives "You are not authorized to access this page." and nobody can't see anything including admin!!!
With permission everything OK, no JS errors, better say everything is as normal, but impossible to show Node in popup.
Also I rebuild node access, but still doesn't work.
Any Idea or suggestion???

Comments

develway created an issue. See original summary.

develway’s picture

develway commented

Hmm, the problem was generated by Link module https://www.drupal.org/project/link
Resolved

develway’s picture

develway commented
Status: Active » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

abrlam’s picture

abrlam commented

This might be tangled with the Views module due to a recent security patch.

Views - Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-068
https://www.drupal.org/node/2902604

Could someone take a closer look at the code and see if there's a conflict?

aitala’s picture

aitala commented

I'm having the same issue with a link to a video node - just a title and a video with video.js player. I'm not using the Link module - at least for the video... And Views is not involved.

Tried the dev version and had the same issue.
Eric

Ignore...

joe huggans’s picture

joe huggans
Primary language English
Location Kiel, Germany
commented

What was the fix?

propagganda’s picture

propagganda commented

I have the same problem

develway’s picture

develway commented

In each case this is a particular problem, in my case the "You are not authorized to access this page" error generated the Link module, I just reinstalled the version from 7.x-3.5 to dev, that is all. Look of your own Drupal platform.

finex’s picture

finex commented

Same problem here (using latest colorbox_node -dev, link 1.5, views 3.20 and D7.59). I've also tried to revert the security fix on views module without results.

finex’s picture

finex commented

If you call the ajax endpoint using a normal GET, the response is correct. If you make the request using a POST (the current behaviour), the response contains the error message ("You are not authorized to access this page").

toprak’s picture

toprak commented

What's the soluiton ? I'm not familiar with the issue. Finex, Where can I change POST-GET option ? Please, point the file to be changed.

finex’s picture

finex commented

@toprak: I didn't, it was just a test I've done :-(

tommy55’s picture

tommy55 commented

I encountered this problem today, and I don't have the link module in my configuration.
I thank you for this module, but I find it sad that there is no solution after 2 years.
Do we have to use other modules to show nodes with pop up?