Bug 94767 – phpBB 2.0.15: Site admin becomes a normal user after changing group permissions

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description René Fleschenberg 2005-06-01 13:08:42 UTC]

If you change a group's permissions for a private forum and the group contains
an administrator and does not have moderator status for that private forum, you
lose your administrator status and become a normal user. The only way to recover
from the situation then is to modify the database tables by hand.

Reproducible: Always
Steps to Reproduce:
1. Log in to administration panel.
2. Change the group permissions for a private forum for a group that contains an
administrator and does not have moderator status for that private forum.


Actual Results:  
You lose your administrator status and become a normal user.

Expected Results:  
Only adjust the permissions for that forum accordingly and do not modify the
executing user's status in any way.

The issue seems to be fixed in upstream. See
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=290149

[Comment 1 René Fleschenberg 2005-06-01 13:26:33 UTC]

See http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=290149

[Comment 2 René Fleschenberg 2005-06-01 13:39:20 UTC]

I am not sure if "RESOLVED UPSTREAM" is the correct status for this one and
cannot find any documentation about what "RESOLVED UPSTREAM" exactly means :(

[Comment 3 Jakub Moc (RETIRED) 2005-06-01 14:06:22 UTC]

Resolved upstream means that it is not a Gentoo-specific problem, you should ask
phpBB developers to fix it (file a bug there), wait for next phpBB release where
it will be fixed or fix it yourself. :-)

Which reminds me of Bug 94106 - still unfixed.

CC-ing webapps just in case they were in mood to put a patch into portage. :-)

[Comment 4 René Fleschenberg 2005-06-03 07:02:33 UTC]

(In reply to comment #3)
> Resolved upstream means that it is not a Gentoo-specific problem, you should ask
> phpBB developers to fix it (file a bug there), wait for next phpBB release where
> it will be fixed or fix it yourself. :-)

Then RESO UPST is *not* the correct status for this bug, because as I said
above, the bug *is* allready fixed in upstream, but the Gentoo ebuild does not
yet apply the fix. So I am reopening the bug now.

I also provided a link to the bugfix from upstream:
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=290149

[Comment 5 Jakub Moc (RETIRED) 2005-06-03 10:07:28 UTC]

>In order to address this issue, we have re-packaged the 2.0.15 release to
include >a fix for this issue. No other files have been altered in this update.

There is no patch needed... but the mirrors have the old tarball

Downloaded from upstream: 
443803 May 14 12:31 phpBB-2.0.15.tar.bz2

Downloaded from mirrors:
443698 Jun  3 18:59 phpBB-2.0.15.tar.bz2

[Comment 6 Renat Lumpau (RETIRED) 2005-06-30 06:26:56 UTC]

2.0.16 is out, please test and reopen the bug if the problem persists.