Admin Profiles (for v1.3.x only!) Support Thread

cant get this to work at all.

i have a server with fast hosts and i have uploaded all the files as said in the installing read me file, i have uploaded the sql file, and run the quiry, this said 204 done.

now when i go to the admin section is doesn't show the options for the admin.

i have ran this on a local sever on my pc and that worked perfectly fine!

any help?

also just to add this is a fress install with no other mods at all. the only mods i have mad is i have removed the htaccess file in the adim incleds file as it was stopping images and style sheets.

basically my admin hasn't changed at all!!!!!

Quote:

---

Originally Posted by austy25

This is awesome thank you so much for this contribution. I just have a question. I run a digital scrapbusiness and I'd like my designers to be able to upload their own products and write their own description and for example cubecart - has options to make certain things delete protected and they can only write but not edit anything. I was wondering if there is a mod for that as well ???
Thank you so much.

---

There's no mod like that of which I am aware. It's also interestingly different to the normal request in this general area, i.e. to restrict certain contributors to only being able to edit "their own" products. Could you tell me more about what you would want to delete-protect.

Quote:

---

Originally Posted by kitcorsa

cant get this to work at all.

i have a server with fast hosts and i have uploaded all the files as said in the installing read me file, i have uploaded the sql file, and run the quiry, this said 204 done.

now when i go to the admin section is doesn't show the options for the admin.

i have ran this on a local sever on my pc and that worked perfectly fine!

any help?

also just to add this is a fress install with no other mods at all. the only mods i have mad is i have removed the htaccess file in the adim incleds file as it was stopping images and style sheets.

---

How many Admin accounts have you set up? And what is your Admin account ID number?

Quote:

---

Originally Posted by kuroi

There's no mod like that of which I am aware. It's also interestingly different to the normal request in this general area, i.e. to restrict certain contributors to only being able to edit "their own" products. Could you tell me more about what you would want to delete-protect.

---

Well if I set it up to where each user has access to the categories section - they see the X as well so they "could" theoretiacally delete some categories along with the products in that category ... so I was just wondering if there is like something where they can only add their products but they don't see any of the edit or delete buttons ... which is no biggie this works great for now :)
Thank you :)

Quote:

---

Originally Posted by kuroi

How many Admin accounts have you set up? And what is your Admin account ID number?

---

there are 2 admin account, i am admin number one, id1, the other admin basically just want access to be able to add products and confirm checkouts.

but basically there the second admin has full access at mo and there is little p button to edit the privalages,

works fine on my local server and its fantastic but on the real server not running, no errors on the error report log files it just as if its not loaded the mod at all, even thought all files are uploaded and i have installed the sql thought the tool pannel on the site and the error box said it was uploaded and installed.

i have even copyed the code and pasted in the sql tool online and that not worked.

is there a direct link using a http:// url to the edit privalages page for a user/admin???

Quote:

---

Originally Posted by kitcorsa

there are 2 admin account, i am admin number one, id1, the other admin basically just want access to be able to add products and confirm checkouts.

but basically there the second admin has full access at mo and there is little p button to edit the privalages,

---

This is strange, as the SQL gives complete access to the user with ID 1 and none to any other users until the first user grants permissions. So I was wondering whether you might actually have ID 2 or later, and no permissions set up.

Quote:

---

Originally Posted by kitcorsa

works fine on my local server and its fantastic but on the real server not running, maybe the server .htaccess is blocking the new style sheet maybe but there is nothing coming up on the log files.

---

This is very unlikely as you would see evidence of it such as an internal server error if it didn't like it or unstyled content if it didn't care.

Quote:

---

Originally Posted by kitcorsa

is there a direct link using a http:// url to the edit privalages page for a user/admin???

---

Very unlikely as it wouldn't be much of an access control system if you could bypass it that easily, but worth a try just to see the result. If you type http://www.yourstorename.com/admin/a....php?adminID=1 you should get a screen telling you that permission has been denied, whether you are logged in or not. If you get anything different in either of those situations, it would give us a big clue.

Otherwise can you take a peek into your database, and specifically your admin_visible_headers table, and tell me which header_id/admin_id pairs you see there?

Quote:

---

Originally Posted by kuroi

This is strange, as the SQL gives complete access to the user with ID 1 and none to any other users until the first user grants permissions. So I was wondering whether you might actually have ID 2 or later, and no permissions set up.

This is very unlikely as you would see evidence of it such as an internal server error if it didn't like it or unstyled content if it didn't care.

Very unlikely as it wouldn't be much of an access control system if you could bypass it that easily, but worth a try just to see the result. If you type www.yourstorename.com/admin/admin_control.php?adminID=1 you should get a screen telling you that permission has been denied, whether you are logged in or not. If you get anything different in either of those situations, it would give us a big clue.

Otherwise can you take a peek into your database, and specifically your admin_visible_headers table, and tell me which header_id/admin_id pairs you see there?

---

all i get is a page can't be displayed screen on the link with my store name etc as if the file isn't there, dont even get the security pop up.

i cant look at my database as i am using fasthost there is not myphp software installed on the server, only a mysql interface for setting up a database name and user name etc

i have myphp on my computer can i loginto it from my pc using the user name etc?????

do you think it could be to do with the setting on say the fasthosts htaccess i have set up?? i will try urning that off and see if that fixes it.

Belive i have sorted the problem and have got it working, sorry for an inconveniance,

think it was due to a currupted file as i got it working by downloading a fresh copy of the admin section and uploading all the files again.

thanks for your help

Phew. That's a relief. I've spent the last 10 minutes trying to login to a fast hosts account to try to find a way into the database in their structure, only for it keep crashing my browser each time. Rather glad I can abandon that. I think the account's not going to last much longer either.

thanks for your help, im happy now, i can now pass the site onto my parter and let him get the products online why i get on and do other things, like watch commic releaf

Hi,

it's maybe beter to use a system like layout_controller.php to give access to the differents modules ?

:lookaroun

Greetz,

Chris

Quote:

---

Originally Posted by titangen

it's maybe beter to use a system like layout_controller.php to give access to the differents modules ?

---

If you mean that Admin access control would be best integrated into the Admin rather than bolted on the side, then I agree. If you're saying that you prefer all that clicking necessary to set a single sidebox, then ... errr .... why?

Quote:

---

Originally Posted by gothstone

I'm rebuilding my site with zencart 1.3.7 and useing admin profiles 1.0.6. All has been working well untill I added in SEO URL's 3.0.0 beta 1 . It will not show up in admin, and in the admin profiles screen it has a check box. But if I check the box and hit save changes it reverts to unchecked. I tried manualy adding 106, 1 to the admin allowed pages table, and that fixed the problem, and allows me to use SEO urls. However if I go back to admin profiles and make any change, I loose access again. I think this is related to the fact that there is no admin boxes file for this mod. Any suggestions? I will cross post this in the SEO URL's topic since it is a direct confilict between the mods. Thanks for any help!

---

Hi,
I am having exactly the same problem, and adding 106 does not seem to make the menu reappear as well...

Thanks

Hi all,

Ok I have added this mod to my site, ran the sql file and created the tables. Now when I log in to the admin section I get this error:

Quote:

---

1146 Table 'diecast_sales.zen_admin_visible_headers' doesn't exist
in:
[select admin_id from zen_admin_visible_headers where header_id = '1']
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

---

Any ideas, I am Admin_ID1 and everything seems to be in place as far as the tables are concerned.

Please HELP.

Thanks much in advance.

RSprinkel

Ok got this fixed. After looking at my tables in the db, I noticed the tables it added did not have the zen_ in front like the others. I added the zen_ and all works ok with the exception I cannot See in the Admin/Tools/Admin Settings anywhere to edit permissions.

I am logged in as Admin 1 and most of the pages are off limits to me.

Anyhelp on this.

Thanks.

Ok Update.

I found that after installing this mod, I had to actually leave the site and close down the browser and login again. Everything works now. Just have alot of Boxes (step 4) to do with all the other mods I have installed it seems as I don't have access to the ones I MAINLY Need access too.

Thanks for this great Mod.

ZENCART Rocks as well as the Contributors!!

Quote:

---

Originally Posted by Hemma

I am having exactly the same problem

---

Sorry Hemma. For the time Admin Profiles and SEO URLs are not compatible.

Quote:

---

Originally Posted by RSprinkel

I found that after installing this mod, I had to actually leave the site and close down the browser and login again.

---

Glad you found a way through this, and quite quickly too from the timestamps on your posts.

The closing and restarting of the browser ends a "session" and starts a fresh one. Can't say I've ever had to do this, but it did prove to be the solution for somebody earlier in this thread too.

can I make sure I am doing this right with the code for the extra boxes:
Say I have super_orders_customers_dhtml.php

The code for this should go from:

PHP Code:

---

<?php
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_ORDERS, 'link' => zen_href_link(FILENAME_SUPER_ORDERS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_STATUS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_STATUS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_FORMS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_FORMS, '', 'NONSSL'));
?>

---

to:

PHP Code:

---

<?php
  if (!defined('IS_ADMIN_FLAG')) {
   die('Illegal Access');
  }

$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_ORDERS, 'link' => zen_href_link(FILENAME_SUPER_ORDERS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_STATUS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_STATUS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_FORMS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_FORMS, '', 'NONSSL'));
  foreach ($options as $key => $value)
  if (page_allowed($value['page'])=='true')
    $za_contents[] = array('text' => $value['box'], 'link' => zen_href_link($value['page'], '', 'NONSSL'));
  ?>

---

I am also getting a weird error, I am sure its my install error. I am running this on 1.3.7

On Third Party Mods section not all of the mods are showing up, then I click on it and get that I don't have permission to be there and go to the back to the box selection and it shows up under the Third Party Mods but it also makes everything in that drop down menu repeat so there are two of everything now. Example:

Customers, Orders, ....and then it will repeat again.

Help please,
Thanks

Ok, well you know when you were a kid and the teacher wrote on your report card, Doesn't fallow written instructions well!, you can add that to this here.

So this is the error you get when you write the code like I did, so I will give an example that might help people like me:

So lets take super_orders_customers_dhtml.php, and go from the original code to the admin profiles code

Original code:

PHP Code:

---

<?php
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_ORDERS, 'link' => zen_href_link(FILENAME_SUPER_ORDERS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_STATUS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_STATUS, '', 'NONSSL'));
$za_contents[] = array('text' => BOX_CUSTOMERS_SUPER_BATCH_FORMS, 'link' => zen_href_link(FILENAME_SUPER_BATCH_FORMS, '', 'NONSSL'));
?>

---

Modified code:

PHP Code:

---

<?php
  if (!defined('IS_ADMIN_FLAG')) {
   die('Illegal Access');
  }
$options = array( array('box' => BOX_CUSTOMERS_SUPER_ORDERS, 'page' => FILENAME_SUPER_ORDERS),
                    array('box' => BOX_CUSTOMERS_SUPER_BATCH_STATUS, 'page' => FILENAME_SUPER_BATCH_STATUS),
                    array('box' => BOX_CUSTOMERS_SUPER_BATCH_FORMS, 'page' => FILENAME_SUPER_BATCH_FORMS),
                );

  foreach ($options as $key => $value)
  if (page_allowed($value['page'])=='true')
    $za_contents[] = array('text' => $value['box'], 'link' => zen_href_link($value['page'], '', 'NONSSL'));
  ?>

---

I really hope that helps some people out there, I guess we learn from our mistakes, lets just say I am learning a lot!:blink:

Hi Kuroi,

Well, just downloaded your contrib, followed your install.txt -step by step- and... it works great! :clap:
Just wanted to say thanks for a very useful tool.

Pierrick

You're very welcome pierrick. Nice to meet a user who follows the installation instructions too! :D

Hey, whats that mean.....ok sorry, :blush:

It really is a great one, I think it should come stock with it!

Quote:

---

Originally Posted by godspeed27

Hey, whats that mean.....ok sorry, :blush:

It really is a great one, I think it should come stock with it!

---

:oops:
LOL. That wasn't aimed at you. I promise!

The Admin is scheduled for re-write in Zen Cart 1.6 and hopefully fully-integrated (and therefore better) access control will form part of that delivery.
:thumbsup:

1.6...wow, thats a big jump..when is that going to be out?

Quote:

---

Originally Posted by godspeed27

1.6...wow, thats a big jump..when is that going to be out?

---

Zen Cart never publishes release dates in advance - very sensibly in my view. With a large installed base and a small development team, it's more important to get it right, than rush it out to meet a deadline. So the most that one could say would be that 1.6 will probably come out sometime after 1.4 and 1.5.
:wink:

Somehow I managed to screw something up. I had AP working like a charm but now my defined admins all get the full menus in the admin where they had only the ones they needed. Access restrictions are still in order though.

I checked the database and all the visible header settings are still in place but somehow they are not applied anymore.

Can someone please tell me in what file (and preferably what lines of code) I should check to make the admin interface look like it did?

Using ZC1.3.7 and AP1.0.6

Have you thought about a reinstall? Have you downloaded all of your files to see if they are still correct...use winmerge to compare them to stock ones. I would start there. If you did a backup or something ftp clients can mess them up.

Yep, your right. A reinstall did the trick. Read about problems with FTP but never experienced them myself. Thanks for the reminder. Guess I have to be more aware of the FTP hick ups that can occur.

Only thing is that Image Handler and Cross-Sell now show up twice in the menus. Is there any way to remove these double entries? Within the permissions window they only display once.

there was a post about something like that in this thread...but thats 24 pages to go through.

Should have searched the thread first but I was on a roll with my previous question.

Found something in post 135 about the the admin_files and admin_allowed_pages tables that could have been it if only I could find double entries for these mods but I can't.
The admin_visible_headers and admin_menu_headers are also clean.

What am I missing?

Quote:

---

Originally Posted by davale

Image Handler and Cross-Sell now show up twice in the menus.

---

Is that twice in the same menu, or two different menus? and which menus?

Twice within the same menu. Cross-Sell appears twice under Catalog and ImageHandler twice under Tools.

Solved! Please hit me hard on the head (I just did the same).

Turns out that I left backups of the unedited dhtml files within the extra_boxes directory when reinstalling. Guess what happened when I removed them. Sorry to have bothered you with this extremely stupid move.

But I have to ask if this in any way polluted the database. There doesn't seem to be any problem but do I have to clean up some of the tables?

Quote:

---

Originally Posted by kuroi

Is that twice in the same menu, or two different menus? and which menus?

---

Who's on first ? :laugh:

(Sorry, :oops: i couldn't resist).

:clap:

Quote:

---

Originally Posted by davale

I have to ask if this in any way polluted the database. There doesn't seem to be any problem but do I have to clean up some of the tables?

---

No, to both questions. Your database should be fine. New entries should only be added when there is not an entry already there for the file needing permission, rather than when there is a duplicate.

I've installed the admin profile it works fine but I disabled 2 menus both catalog menu and tools menu. However they are still visible but when you click on any item, it shows that the user can't access that area, which is good.

But is there anyway to remove the menus?

thanks,

Rodrigo

if installed right it should take them away, did you unchecked the menu bar..if you did that I would make sure its installed right or you didn't override or change any of the files.

You probably forgot to add Kuroi's code to the third party extra boxes files. Take a look at the 'updating box files (a step-by-step guide).txt' document included in the download.

If you did mess that up...man...don't worry, the best do that...(me) Look up a couple of posts and you will see where I gave a great example of how to do this!

G,Luck

Thanks,

I'll take a look

I found the problem! it was missing the if statment

if (menu_header_visible('Tools')=='true')

It is working fine now.

Thanks All

This might be a fairly major issue.

My user can change their settings if they know the path to the admin page!
If the user enters the URL to edit a user they can change their own permissions and gain full control!
http://www.mysite_url_here.com/admin....php?adminID=2

The user is allowed to access this page, and allowed to change settings on this page. They can open up the site and do quite a bit of harm.

They cannot access the page without the variable in the url, but they have full access otherwise. If someone has installed Zen, or used Zen, they will have an understanding of the expected path and will probably monkey around. I did. They can even lock the main admin out by simply appending the URL with adminID=1! Try it.

Is there a setting that can be changed to fix this?




One other thing. Is there any way to restrict what they see on their 'Admin Home' page? I would prefer that they didn't see all stats.

Roblaw, wow... i just verified what you said and its very true.

Personally I'm not concerned since its all internal users and since everything is tracked, it shouldn't be an issue...

that said, if you have reason to believe (which you always should assume so) that someone has the intent of being malicious and is knowledgable, then they could at the same time clear any of the tracking data and not be noticed.

very interesting find...

Quote:

---

Originally Posted by roblaw

This might be a fairly major issue. ...

Is there a setting that can be changed to fix this?

---

If you replace your admin/includes/init_includes/overrides/init_admin_auth.php with this one --> Attachment 1848 then it should close that hole. A small health warning - this file is taken from Admin Profiles 2 which is still under development and so not fully tested, but in a quick test after retrofitting it to a 1.0.6 environment it seemed to work OK without side effects.

Quote:

---

Originally Posted by roblaw

One other thing. Is there any way to restrict what they see on their 'Admin Home' page? I would prefer that they didn't see all stats.

---

What appears on the Admin Home page is controlled by the admin/index.php file. There's not a switchable way, though you could use CSS to set display:none for the class .reportBox. This would turn the home page content off for all users. If you wanted more precision you would need to change the PHP by inserting "if" statement in there to restrict display to specific values of $_SESSION['admin_id'].

Quote:

---

Originally Posted by kuroi

If you replace your admin/includes/init_includes/overrides/init_admin_auth.php with this one --> Attachment 1848 then it should close that hole. A small health warning - this file is taken from Admin Profiles 2 which is still under development and so not fully tested, but in a quick test after retrofitting it to a 1.0.6 environment it seemed to work OK without side effects.

---

Thanks for the fix. Appears to work well for me with Admin Profiles 1.06 on ZC 1.37.

Woody

Virtualahmad,

As in your case, this won't matter for most users. Anyone who has ever had an employee go bad, will probably want to get a fix in place. Especially if you have employees that like to tinker with things.

I am going to implement the solution by kuroi. Thanks for the quick response.

If others are looking to change the view that other users have on the admin/index.php page, I would recommend kuroi's suggestion a conditional statement checking for the admin_id prior to display. Hiding it with CSS is viewable in source.

Thanks again.

roblaw

Help please. I'm usually pretty good at this stuff

Quote:

---

If you are using a database prefix for your Zen Cart tables, you must either: run the install_adminlevels.sql file using Zen Cart's Admin > Tools > Install SQL Patch facility, or edit the file to change the prefix for all create table and insert statements, before running it using your preferred tool.

---

Firs how do I know if I'm using a prefix_not sure what that means

I don't see an install-adminlevels.sql file to run?

Can someone please point me in the right direction.

THanks!

Firstly that should read install_admin_profiles.sql. After more than a year of operation and six releases, I'm amazed that nobody has pointed that out before.

If you don't know whether your Zen Cart was installed with a database prefix or not, I recommend installing Admin Profiles by using Admin > Tools > Install SQL Patches, as then you don't need to worry about this question.

Ok thanks that makes more sense I was just confused by that file name LOL. I will work on this tonight.

Thanks a bunch for the quick response

Quote:

---

Originally Posted by Honeysmom

Ok thanks that makes more sense I was just confused by that file name LOL. I will work on this tonight.

Thanks a bunch for the quick response

---

Thank you for drawing my attention to this error, which has been corrected ready for any future releases.

Quote:

---

Originally Posted by Honeysmom

Help please. I'm usually pretty good at this stuff



Firs how do I know if I'm using a prefix_not sure what that means

I don't see an install-adminlevels.sql file to run?

Can someone please point me in the right direction.

THanks!

---

There appears to be a couple of errors/typos in the install.txt file. Perhaps it is for an older version.

1) When they are referring to the prefix, you can tell if your tables have a prefix by viewing the DB in something like phpMyAdmin. Do your tables start with something like zc_? For example, is you first table zc_address_book? My button push installs (usually provided by your host) will ask if you would like to use a prefix, or they will offer you that option.

2) The 'install-adminlevels.sql' file seems to be named 'install_admin_profiles.sql' now.

Good luck.

Bob L.
http://www.venturen.net/

Kuroi,

I have super orders installed and I installed your patch to address the security issue that we discussed yesterday. When navigating to pages within 'super orders' (newer pages than your install) I a security clearance error.

"Sorry, your security clearance does not allow you to access this resource.
Please contact your site administrator if you believe this to be incorrect.
Sorry for any inconvenience."

I am assuming this can be addressed within the DB table 'admin_files'. Is this correct? If so, do you have some information regarding naming structure needed? Would it match up with the menu names for the page?

Any advice would be a real time saver. Thanks.

roblaw

I haven't actually used super orders personally, but am aware of it as one of three mods that needs some exceptional handling in Admin Profiles. In this case because, unusually, it has pages located within the mod that aren't referenced directly from the Admin menu system.

To deal with this you would need to set up extra box files in your admin/includes/boxes/extra_boxes folder. The super orders pages should then appear in Admin > Tools > Admin Settings (or at least I hope so, this is all a bit theoretical).

Anyway, to save you some time, here --> Attachment 1858 <-- are the box files that you need. Please let me know if this works.

Kuroi,

Worked great. Thanks for your help!

roblaw

Hi All!

Before i install this great contribution i just wanted to verify that the admin profiles 1.0.6 will work with ZC 1.3.7 - it looks like it will from other people. Also just wanted to verify that any additional mods that i add i have to modify the boxes with the access granted three line code?

Anyone else have anything to look out for when installing, etc?

As always I appreciate everyone's help!

Thanks - Zack

Quote:

---

Originally Posted by zackf

i just wanted to verify that the admin profiles 1.0.6 will work with ZC 1.3.7

---

It will.

Quote:

---

Originally Posted by zackf

Also just wanted to verify that any additional mods that i add i have to modify the boxes with the access granted three line code?

---

Not sure I understand, but I'll take a stab - you will need to modify the boxfile for any mod that has an admin page that you install in future - there are instructions for doing this in the release package.

Quote:

---

Originally Posted by zackf

Anyone else have anything to look out for when installing, etc?

---

It's all in the installation instructions (unless you're using Super Orders!)

Hi Kuroi - I really appreciate your quick response. can't wait to install it! :)

Thanks again - zack

Hi - need some help. i'm having a blond moment. i uploaded all the files and including the admin.php and english.php including images, etc. For some reason i can't see the permissions icon showing up in the admin area. I tried manually going to the admin_control.php and it works.

Thanks - Zack

Did you use the pre-patched admin.php and english.php or apply the patches manually as per step 3 of the installation instructions?

I used the prepatched files

Good mod thank you. Installed on zencart v1.3.7 using prepatched files. Was not immediately apparent to me that I had to tick the menu to have it display as I thought it would do so automatically if I ticked options which appear in the menu. RTBM - mentioned in step 6 of the instructions of course.

Quote:

---

Originally Posted by zackf

I used the prepatched files

---

How did you apply them / Where did you put them?

I uploaded all the files as is right from the ftp program. I'm currently referencing the admin_control script directly. The only thing that is missing is the icon from the admin settings page.

Are you saying that you do have the "edit permissions" button?

hi Kuroi,

First and foremost, let me say a tremendous thank you for Admin Profiles. A great mod, worked 'out of the box' and doing it's job really well. :clap:

I noticed something today that's a very very minor thing, but thought I'd post to see if you or anyone was aware and/or if there was a fix.

======================
Symptoms:
Pages for 3rd party mods are not avail for checking off until access is attempted and the admin user gets the 'your security settings prohibit...' message.

After 1st attempt, checkbox for that page is avail in AdminProfiles.
======================

As I said, not anything urgent as it resolves itself after the first attempt to access, but I found it a bit strange.


Fantastic mod, great concept well implemented. That's my story and I'm sticking to it! :)

Regards,
~Ray
BouncerFL

Quote:

---

Originally Posted by BouncerFL

Symptoms:
Pages for 3rd party mods are not avail for checking off until access is attempted and the admin user gets the 'your security settings prohibit...' message.

After 1st attempt, checkbox for that page is avail in AdminProfiles.

---

Hi Ray

Glad you like the mod. The symptoms that you describe suggest that you aren't creating box files for your 3rd party mods. Please review step 4 of the installation instructions and the "updating box files (a step-by-step guide)" files included with in the release package.

Quote:

---

Originally Posted by kuroi

Hi Ray

Glad you like the mod. The symptoms that you describe suggest that you aren't creating box files for your 3rd party mods. Please review step 4 of the installation instructions and the "updating box files (a step-by-step guide)" files included with in the release package.

---

Hi Kuroi,

A quick reset of the boxes files for one of the installed mods, then re-following the errant step 4 (errant in my implementation, not the mod's fault) and we're off and running.

Thanks again for the great mod and the superb support!

~Ray

Hi all,

I have installed Admin Profiles a while back -very easily- and it has performed flawlessly since.
I've just added another contrib to the admin module today (Add Customers from Admin) and behold, Admin Profile saw this addition and added it to the profile page automatically.
Thumbs up Kuroi. Truly a nice piece of work. Thanks heaps!:clap:

Pierrick

Quote:

---

Originally Posted by rodi01

I've installed the admin profile it works fine but I disabled 2 menus both catalog menu and tools menu. However they are still visible but when you click on any item, it shows that the user can't access that area, which is good.

But is there anyway to remove the menus?

thanks,

Rodrigo

---

I have a similar issue. I've installed Admin Profiles and it works fine all except for the Tools menu. The Tools menu won't change no matter what I do. I can add in the missing "if" statement to /admin/includes/boxes/tools_dhtml.php:

if (menu_header_visible('Tools')=='true') {

This will get the menu to hide properly if I want to hide the whole thing, but I can't turn off individual items. Any help is much appreciated... I wonder why I had to make this extra edit in the first place? Odd.

Quote:

---

Originally Posted by thedust2010

I wonder why I had to make this extra edit in the first place? Odd.

---

You shouldn't have had to. As you didn't say which version of Admin Profiles you are using, I've been back through all of them, and that line isn't missing in any of them. This suggests instead that the version you have installed has one or more corrupted files.

I recommend downloading and re-installing the files again, watching carefully for any FTP errors. You shouldn't need to re-patch the database though.

@pierrick:

[edit] - I thought you were talking about the additional customers fields.

I just installed this mod and have to say - it ROCKS! What a great add-on! And while the install notes did indeed look daunting, all worked very nicely (except for a parse error with every box file I created caused by a missing closing bracket!)

I do have a slight problem, though. It seems the Third Party Mods listed at the bottom have a couple of extras which I can't identify. The "source" of the Admin settings page shows the following mods:

Quote:

---

<div class="checkboxBlock">

<label class="permissionBox"><input name="admin_control" class="Third Party Mods" type="checkbox" checked="on" value="on">admin control*</label>

<label class="permissionBox"><input name="Super Orders" class="Third Party Mods" type="checkbox" checked="on" value="on">Super Orders</label>

<label class="permissionBox"><input name="CAPTCHA Validation" class="Third Party Mods" type="checkbox" checked="on" value="on">CAPTCHA Validation</label>

<label class="permissionBox"><input name="super_orders" class="Third Party Mods" type="checkbox" checked="on" value="on">super orders</label>

<label class="permissionBox"><input name="" class="Third Party Mods" type="checkbox" value="off"></label>

<label class="permissionBox"><input name="super_batch_status" class="Third Party Mods" type="checkbox" checked="on" value="on">super batch status</label>

<label class="permissionBox"><input name="super_batch_forms" class="Third Party Mods" type="checkbox" checked="on" value="on">super batch forms</label>

<label class="permissionBox"><input name="super_payment_types" class="Third Party Mods" type="checkbox" checked="on" value="on">super payment types</label>

<label class="permissionBox"><input name="super_report_await_pay" class="Third Party Mods" type="checkbox" checked="on" value="on">super report await pay</label>

<label class="permissionBox"><input name="super_report_cash" class="Third Party Mods" type="checkbox" checked="on" value="on">super report cash</label>

<label class="permissionBox"><input name="super_shipping_label" class="Third Party Mods" type="checkbox" checked="on" value="on">super shipping label</label>

<label class="permissionBox"><input name="super_packingslip" class="Third Party Mods" type="checkbox" checked="on" value="on">super packingslip</label>

<label class="permissionBox"><input name="super_invoice" class="Third Party Mods" type="checkbox" checked="on" value="on">super invoice</label>

<label class="permissionBox"><input name="super_data_sheet" class="Third Party Mods" type="checkbox" checked="on" value="on">super data sheet</label>

</div>

---

I bolded the 2 unknowns for easy reading. Questions:

1. Is the 1st unknown (input name = super_orders) the same as the 2nd label class (input name = Super Orders)? If yes, why are there 2; if no, what is the difference between super_orders and Super Orders?

2. The 2nd unknown has no name! Any ideas on where I can go to figure out how it got there and/or what it is?

Thanks for any and all help!

Rainer

Zen Cart 1.3.7 running on localhost (Win32)
Apache - 2.0.58
MySQL - 5.0.22
PHP - 5.1.4 (Zend: 2.1.0)
Expertise - trial & error

rbobzin

Could you tell me something about how you went about installing these mods and the box files that you created for them.

OK, but keep in mind this will all be based on recollections served up by an increasingly fault-prone memory!

In an attempt to come up with a better "starter" store, I did a new install of Zen Cart (non-demo version), set up basic store configs in Admin, added test Ctg, sub-Ctg, product, customer and 2nd Admin person, then installed the following mods (not necessarily in this order):

- Add customers from Admin
- FCK Editor
- Super Orders 2.0
- Captcha
- Capitalize sign-up fields
- Email address exporter
- NextLevel Zen Admin
- and lastly Admin Profiles

I followed each step as listed in the Admin Profiles install notes:

1. Used phpMyAdmin (no errors), then checked to confirm all tables properly added
2. Checked to make sure no "modified" Zen Cart files would be overwritten, then copied all to Admin folder
3. Applied all 3 patches manually
4. Created new box files (per updating_box_files.txt instructions) for Email Exporter, LinkPoint and Add Custs for Admin, and copied the 3 Super Order box files you provided a link to in this forum
5. Did NOT do "pages available for all users" step
6. Logged into Admin to set Permissions

NOTE: This is where I encountered the parse error from each of the 3 box files I created. I added the missing bracket to each file, then reloaded the Admin Permissions page.

I checked all boxes, then saved. Went back into Permissions page, noticed several (previously checked) boxes were now unchecked, so checked all again and saved. Then, while testing features in Admin of the other mods, whenever I ran into "permission denied" screen, went back to Permissions page, checked all boxes again, returned to that specific feature to test again and this time no "permission denied" problem. This happened several times (always with an untested feature) but re-checking all boxes in Permissions page always fixed it.

I noticed the "nameless" checkbox at the bottom of the Permissions screen, but assumed it would eventually get named once I ran into that particular feature during my testing, but it never did. That's why I then finally looked at the source of the Permissions page to see where that box was coming from, and posted relevant part to this thread.

Hope that helps!

I installed this mod successfully early in the year. I'm running ZC 1.37.

My client has gone in and added categories and products. She has full permissions to access the Catalog but now cannot access most of the products.

What do I need to do?

Hi,

I've just uploaded Admin profiles after creating several admin accounts already. When I logged in again using other accounts, the menus are gone, but when I log in using my main account, it lets me access every admin menu. Sounds okay since I haven't set up permissions yet..

My question is, why is the P icon not showing up in my Admin Settings? How do I change permissions for individual admins then?

Thanks!

i don't have the P to change individual permissions either, but i found away around it. If you manally load the script you can change them. just use /admin/admin_control.php?adminID=1 or 2 or 3 (you just use whatever number is assigned to that admin). if you assign permissions in a subcategory for example My Store under Configuration Menu you must also check off Configuration menu (highlighted in blue) as well otherwise the Configuration drop down menu wont appear for them.

Zack

It's showing up on mine now. What I did was just to put it the patches in admin.php from the install text file included.

Hi there,

I've just tried to install this Admin Profiles modification to my new install version of Zen 1.3.7 which has no extra 'mods' installed on it.

Followed all the steps but when I now go to my Admin log-in, I get the following message.....

Fatal error: Call to undefined function: menu_header_visible()
in /homepages/34/d204809067/htdocs/zen/admin/includes/boxes/configuration_dhtml.php on line 13

This was reported once earlier on these forums - but it's not a corrupt file as I've checked the remotely hosted version and all is well.

I've checked my database tables based on some of the talk on these threads. I am Admin User ID 1 and all my tables start with the prefix I'd selected on install.

So now I'm 'snookered' in that I can't get into Admin at all! Any solution to this show-stopper?????? (My fingers are tightly crossed!)

What seems to have worked (although I've yet to fully test as got to run....) - Is that I've simply copied the function it moaned about straight into the page that was trying to access it.

That caused it too moan about another missing function - so I did the same, and repeat a few more times.

Now I get my admin menus back including this excellent new 'Admin Settings' one which I'll try later.

Question though - Do you forsee any problems arising from this fix I've done???? Obviously still grateful if there's a answer to the main issue (my prior post) as I'd prefer to understand from those that really know what they're doing!!!!

Thanks!

Hi Kuroi,

Nice Job. I had installed this and working fine. Thank you very much for this wonderful job. But I want to restrict users to categories and product label. Any idea How to do that. I am running a store where the retail shopkeepers will advertise their product in their own category. This is where I need to restrict users of admin section to view their products/category only. Would you pls suggest how to do that.

Thanks
Biren

This mod sounds like what I need. Will this work with 1.3.7? :lookaroun

Quote:

---

Originally Posted by rbobzin

OK, but keep in mind this will all be based on recollections served up by an increasingly fault-prone memory!

---

Don't I know that feeling!!

I'm puzzled by this. If it weren't for your recollection of the order in which you did things, I would have suggested that you may have accessed Super Orders before adding the specific box files for that mod. However, it's not a mod that I actually use, and it's the 2nd most challenging for Admin Profiles to interpret, so there may be something else going on in there.

I would recommend going to the admin_files database table to obtain the IDs for the two rogue pages (and delete the records), and then go to the admin_allowed_pages table and delete all records that have those page_ids.

Quote:

---

Originally Posted by mlbracewell

I installed this mod successfully early in the year. I'm running ZC 1.37.

My client has gone in and added categories and products. She has full permissions to access the Catalog but now cannot access most of the products.

What do I need to do?

---

This doesn't sound like an Admin Profile problem. AP is much more all or nothing as it cuts of access to particular functions such as editing categories and doesn't get involved at the level of individual products or categories.

Could you describe what happens when she is unable to access a product? Is there an error message? Is she redirected away from the page? Does her browser fall over?

Quote:

---

Originally Posted by msrache

I've just uploaded Admin profiles after creating several admin accounts already. When I logged in again using other accounts, the menus are gone, but when I log in using my main account, it lets me access every admin menu. Sounds okay since I haven't set up permissions yet..

---

Your analysis is correct.

Quote:

---

Originally Posted by msrache

My question is, why is the P icon not showing up in my Admin Settings? How do I change permissions for individual admins then?

---

Sounds as though you haven't fully implemented step 3 of the installation instructions. Do you have the "Edit Permission" button?

[Aha see from your later post that you've now found the patches! :thumbsup:]

Quote:

---

Originally Posted by IslandGuy

Question though - Do you forsee any problems arising from this fix I've done????

---

Probably not, though it's not ideal.

Quote:

---

Originally Posted by IslandGuy

Obviously still grateful if there's a answer to the main issue (my prior post)

---

Can you post the full path for the admin_profiles.php file on your remote server.

Quote:

---

Originally Posted by brianpat

I want to restrict users to categories and product label. Any idea How to do that. I am running a store where the retail shopkeepers will advertise their product in their own category. This is where I need to restrict users of admin section to view their products/category only. Would you pls suggest how to do that.

---

Admin Profiles doesn't do this as it restricts access to admin functions not individual categories or products.

What you're after is a much requested feature, but would be complex and difficult to maintain as am add-on module, as it would involve going into the category and product files. These change fairly frequently and are also amended by other mods with which it would clash.

Your best bet therefore is the re-write of the whole Admin scheduled for Zen Cart 1.6, when hopefully something like this might get built into the core code.

Quote:

---

Originally Posted by gcomfx.com

This mod sounds like what I need. Will this work with 1.3.7? :lookaroun

---

:bored: Yes.

Hi, I have a problem:
I am using a database prefix, and I should run the install_adminlevels.sql, but I can't find the file. I searched the forum and found someone with the same problem, but then he said that he fixed it, but didn't said how. Please help, thanks!

I found (here) that install_adminlevels.sql is in fact install_admin_profiles.sql so I tried that one, but got this error message:

Quote:

---

1064 You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'install_admin_profiles.sql' at line 1

---

After a little work (it was my first time running an *.sql script :D) I got the idea.
If anyone else encounters this problem,open install_admin_profiles.sql with notepad or wordpad, and copy everything in there. Go to Admin area, Tools->Install SQL patches and paste all of it in 'Enter the query to be executed:' box. :D
Now it works fine!:clap:

2 fr33pr0d

Apologies for the confusion. It's a silly typo that went un-noticed (or at least uncommented upon) through 5 releases despite my re-working the install instructions for each release.

It is fixed in the instructions for the next release. There just hasn't been a next release for a while!

Thank you for posting this helpful guidance for other users.

I am trying to install Admin Profiles and thought I had it working but when I went back to my storefront I got this:

Warning: require(DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php) [function.require]: failed to open stream: No such file or directory in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

Fatal error: require() [function.require]: Failed opening required 'DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

Quote:

---

Originally Posted by bvrettski

I am trying to install Admin Profiles and thought I had it working but when I went back to my storefront I got this:

Warning: require(DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php) [function.require]: failed to open stream: No such file or directory in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

Fatal error: require() [function.require]: Failed opening required 'DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

---

I actually fixed this problem which was the result of dropping the "english.php" file into the wrong folder. Duh!!

So...Now I've reinstalled admin_profiles 1.0.6 and I get this error in when I go into tools>admin settings

Fatal error: Cannot redeclare class base in /home/lincoln6/public_html/shop/includes/classes/class.base.php on line 17

On my first installation I did create an additional admin account. I am able to log in with either one but can't get into the admin settings.

Thanks for any help.
Brett

Uh, I thought I installed admin profiles according to the instructions, and ran the sql correctly, but i don't see any result - and wonder if i need to install the 'extras' somewhere - but i really can't seem to figure out where to place them and which of the extras i should use. i'm sure this is simple to fix, but can't find answers in any threads.

any help ?
thanks.

Quote:

---

Originally Posted by bvrettski

I am trying to install Admin Profiles and thought I had it working but when I went back to my storefront I got this:

Warning: require(DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php) [function.require]: failed to open stream: No such file or directory in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

Fatal error: require() [function.require]: Failed opening required 'DIR_FS_CATALOG_LANGUAGESenglish/meta_tags.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/lincoln6/public_html/shop/includes/languages/english.php on line 50

---

This is a symptom of a rather screwed up Zen Cart. Your expereinces from your previous post may provide some clues. I would look carefully at your admin/admin.php and your admin/includes/application_top.php files and compare them to the default Zen Cart versions.

Beyond that I can add only that this is nothing to do with Admin Profiles which does not attempt to instantiate any classes, and so this is really outside of my area of expertise.

Quote:

---

Originally Posted by kjb

Uh, I thought I installed admin profiles according to the instructions, and ran the sql correctly, but i don't see any result - and wonder if i need to install the 'extras' somewhere - but i really can't seem to figure out where to place them and which of the extras i should use. i'm sure this is simple to fix, but can't find answers in any threads.

---

You've not given me much to go on. Which version of Zen Cart are you using, and which version of Admin Profiles? Have you checked that all the files are in the locations listed in step 2 of the installation instructions? Did you do all three of the code patches? And is so which of the alternatives for patch 1 and patch 2 did you do?

Hey everyone,

I'm getting a weird error when a FRESH install of 1.3.7 -

I used the patched files plus the sql install both in my phpMyadmin (1st time) and my Install SQL Patches (2nd time).

I get this error every time when i click on permissions (which by the way isn't the image, just a text link)

500 Error (Internal Server Error) due to it trying to reach this link..
/admin/FILENAME_ADMIN_CONTROL.php?adminID=1

Any ideas on WHY this is happening??

Thanks in advance,

Brad