Admin Profiles (for v1.3.x only!) Support Thread

[ddeschn]

Hi Kuroi,

Great contribution to ZenCart - it is going to come in handy.

Here's my problem: I have installed the module as per your instructions and set up a user profile with access to one area of my site. When I log in with that profile username and password I still have full access to everything (where I should only have one menu option).

Thoughts?

-Donovan

[kuroi]

Hi Kuroi,

Great contribution to ZenCart - it is going to come in handy.

Here's my problem: I have installed the module as per your instructions and set up a user profile with access to one area of my site. When I log in with that profile username and password I still have full access to everything (where I should only have one menu option).

Thoughts?

-Donovan

Yes that would be a bit worrying. What happens when you go back and look at the Admin Profile for that user, does it come up showing your restrictions? It's very unlikely that this will be the case, as a new user starts with no permissions, you have to deliberately add them in.

More likely IMO, is that this is a manifestation of the Zen Cart registers_globals bug. This means that although you log in as one user, Zen Cart switches you to be another. Here's an except from the archived support forum on this problem. Although your symptoms aren't quite the same, it would take something like this for the mod to break down so completely.

With register globals on the Admin identity changes when a new admin is created or an existing admin is deleted. This is not an Admin Profiles problem either. It happens on a virgin install of ZenCart without Admin Profiles installed. Admin Profiles just makes the problem very noticeable.

Setting register globals off solves the problem.

If you don't have access to your server's configuration files just add a .htaccess file to the root directory of your ZenCart with the following line of code:

php_value register_globals 0

Actually you should do this anyway since it makes your Zencart more secure. I always do this for live sites but didn't bother in this instance since I was 'only' testing. Wish I had now!

Hope this helps others from suffering the same grief.

Later in that thread I suggested a way of testing whether Admin is properly recognising you as the user you logged on. Here's an extract ...

Your suggestion that it would be helpful to show the identity of the currently logged in user is a good one, but not strictly about Admin Profiles. However, as it is clearly relevant to users of AP, what the hell, let's take a look.

When a user logs in a session variable is created containing his or her admin_ID. When they logoff, this variable is unset. So the easy and correct way to do what you ask, would be simply to create and unset a session variable containing the user's admin_name. Then we could simply display it anywhere we wanted. Yes. NOOOOO.

Unfortunately, due to the admin_ID registers_global BUG identified by Duncanad, this approach would show who logged on, but not who Admin thinks the current user is, due to its tendancy under some circumstances to just change user. Ouch.

A solution that showed who it actually thought the current user was would therefore highlight this unfortunate tendancy ... Let's do it anyway.

Go to the bottom of admin/includes/headers.php. Find the line that reads

<td class="headerBarContent" align="center"><b><?php echo date("r", time()) . 'GMT' . '[' . $_SERVER['REMOTE_ADDR'] . ' ]'; ?></b></td>

change "center" to "left" then insert the following line immediately afterwards

<td class="headerBarContent" align="center"><b><?php $result=$db->Execute("select admin_name from ".TABLE_ADMIN." where admin_id=".$_SESSION['admin_id']); echo $result->fields['admin_name']; ?></b></td>

Upload the file to your server and enjoy.

Knowing whether this does reveal a shift in your user identity would be useful to me for supporting Admin Profiles. If it doesn't, we'll have to try to think of some other possible causes.

[ddeschn]

That seems to have solved it. Somehow what was happening was it kept me logged in as my main administrator and didn't recognize the switch to the new user.

With that features off everything works great!

-Donovan

[travel124]

I want to add the Profiles, however in reading the tuts I need to find out if I am using a prefix in the database.

Looking at the database I have a _zc1 installed and with prefix zen with 95 files. I also have installed zenstore with 190 files with prefix of zen_ and prefix of zenstore.

This does not look right to me and I cannot tell which one is the upgrade and whick one I should delete.

[sketchhgal]

Hi

I've just added the admin profiles module to my site and I'm having a few problems.
It looks to be installed correctly but when I go to the admin tools and click on the permissions icon I'm getting the following 404 error:

The requested URL /store/admin/FILENAME_ADMIN_CONTROL.php was not found on this server.

Anyone have any ideas as to where I've gone wrong with the install?

I'd appreciate any help with this one, it looks like such a good module for a store.

Thanks in advance:

[kuroi]

Hi

I've just added the admin profiles module to my site and I'm having a few problems.
It looks to be installed correctly but when I go to the admin tools and click on the permissions icon I'm getting the following 404 error:

The requested URL /store/admin/FILENAME_ADMIN_CONTROL.php was not found on this server.

Anyone have any ideas as to where I've gone wrong with the install?

I'd appreciate any help with this one, it looks like such a good module for a store.

Thanks in advance:

This suggests a problem with your installation Specifically that the packages admin/includes/extra_datafiles/admin_profiles_data.php file is not present, or is in the wrong place. However, if this is the the case, then it's possible that other components are misplaced too. I'd recommend checking all the files against the locations listed in the install.txt file that comes in the package that you downloaded.

[AndyII]

kuroi, so glad to see you here
After several attempts to find someone to assist in witting these restriction for admin profiles, I have come up empty and only found people who are either scamming or really dont know how to do it, so I plead with you to please
give an example of a restriction needed for "categories"?
I would be deeply appreciative

[kuroi]

I want to add the Profiles, however in reading the tuts I need to find out if I am using a prefix in the database.

Looking at the database I have a _zc1 installed and with prefix zen with 95 files. I also have installed zenstore with 190 files with prefix of zen_ and prefix of zenstore.

This does not look right to me and I cannot tell which one is the upgrade and whick one I should delete.

If you go to your site's includes folder and look at the configure.php file there, it will tell you which database and what database prefix you are using (towards the bottom of the file).

[bumba000]

Hi All,
I have recently installed this mod without any issues. I have found that some of the mods like User tracking, sales report and some others wont let me access them. There seems to be no check box with their name next to in the admin settings > . . .

There are a few check boxes that have no name next to them and I'll put the check in the box and save changes only to find on reload that the check are no longer there.

I have talked this into letting me into sales report a few times (not sure how) but now I have no access to it again.

What is going on with this mod? Is there a way to exclude a user from having limitations? Basically if the user is #1 don't check to see what they do or don't have access to. Just allow it all for that user.

Thanks,
John

[reza]

hi
i installed fresh admin package on 1.3.5 zen cart.
does know somebody where i have to put user_tracking_tools_dhtml.php file, I add the patch to sql, and I putted this file in admin/includes/boxes/extraboxes, and I see it in admi/tools in the same writng, I think it should be defined in english.php too.
I did not do more until a expert give me the point.
2- what does it do actually?