Category Specific Access Restriction (CSAR) - [Support Thread]

Hi Frank,

I have the mod fully installed on a v1.5 site. However, I am running Tabbed Product Pro which it seems the conflict is on the product_info php template. If I revert just that 1 file to my unmodified file, the product listing shows up. If I leave it with the CSAR modifications, then the product page will not load. The TPP mod has a beginning php and and ending php so I tried to swap them around to see if one has to load first, but having the same issue. Any help would be appreciated if you have run TPP in the past.

Whot:

Hi Frank,

I have the mod fully installed on a v1.5 site. However, I am running Tabbed Product Pro which it seems the conflict is on the product_info php template. If I revert just that 1 file to my unmodified file, the product listing shows up. If I leave it with the CSAR modifications, then the product page will not load. The TPP mod has a beginning php and and ending php so I tried to swap them around to see if one has to load first, but having the same issue. Any help would be appreciated if you have run TPP in the past.

Thanks Whot,

I am not familiar with TPP but just downloaded a copy of TPP 1.09 and compared the 2 files tpl_product_info_display.php (CSAR and TPP).

You may want to try this:

After merging the top of the TPP file looks like

<?php
//BOF :: Tabbed Products Pro ::
require(DIR_WS_MODULES . 'tabbed_products_pro.php');
//EOF :: Tabbed Products Pro ::
/**
* CATEGORY_RESTRICTION - find corresponding master category for the current product
 */
$products_id_to_block = $_GET['products_id'];
global $db;
$sql = "select master_categories_id from " . TABLE_PRODUCTS . " where products_id = :productID:";
$sql = $db->bindVars($sql, ':productID:', $products_id_to_block, 'integer');
$result = $db->Execute($sql);

/**
* CATEGORY_RESTRICTION - we are blocking direct access to a restricted product
 */
if (!$_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($result->fields['master_categories_id'],explode(',', CATEGORY_RESTRICTION_LOGIN_CATEGORY)) ) {
 // block access to this product
 echo TEXT_ILLEGAL_ACCESS ;
} else [B]{[/B] // bof CATEGORY_RESTRICTION - OPEN ACCESS

/**
* CATEGORY_RESTRICTION - we are hiding prices for specific categories only
 */
if (!$_SESSION['customer_id'] && in_array($result->fields['master_categories_id'],explode(',', CATEGORY_RESTRICTION_HIDEPRICE_CATEGORY)) ) {
    $hideprice = 'true'; 
    } else {
    $hideprice = 'false';
  }
?>
<div class="centerColumn" id="productGeneral">

And the bottom of the TPP file would look like

<!--bof Form close-->
<?php
    [B]}[/B] // eof CATEGORY_RESTRICTION - OPEN ACCESS
?>
</div>
<?php 
//BOF :: Tabbed Products Pro ::
echo $tabjscript;
//BOF :: Tabbed Products Pro ::
?>

In the above 2 code blocks I have highlighted the corresponding opening { and closing } brackets for your reference.

Of course you still need to merge the code between these 2 blocks...

If this works as desired you may still have price display issues on the x-sell and reviews tabs - and may be on some others.

See how you go and post your findings - including corresponding debug logs if any.

Cheers / Frank

frank18:

And the bottom of the TPP file would look like

Thanks Frank for taking the time to look into the TPP module. But I have finally found what works. I don't know why the last "</div>" has to be moved to the end when using both TPP and CSAR, but this is what worked for me below. Hopefully it helps others who are running both modules.

<!--bof Form close-->
<?php
    [B]}[/B] // eof CATEGORY_RESTRICTION - OPEN ACCESS
?>

<?php 
//BOF :: Tabbed Products Pro ::
echo $tabjscript;
//BOF :: Tabbed Products Pro ::
?>
</div>

Also, I will post my modifications to get it to work with dynamic filter as it also affects the same 6 files as CSAR, but easily doable. It takes a bit more mods than the product_info file, but finally got that part to work as well. I will post my files with notations during the week.

Whot:

Thanks Frank for taking the time to look into the TPP module. But I have finally found what works. I don't know why the last "</div>" has to be moved to the end when using both TPP and CSAR, but this is what worked for me below. Hopefully it helps others who are running both modules.

</div>

Thanks for your update Whot, your solution would have been my next suggestion. Not easy to help with your issue as I don't have TPP installed in any store, so can't make comparisons.

Thanks again / Frank

I have installed the latest version of this module in a 1.5.1 store. I merged all the changes, but am having the following issue:

1. If I restrict access to a category, when a customer attempts to go to that category, they are sent to the conditions page, whether they are logged in or not, and whether they have special privileges or not.
2. If no categories are restricted, the home page of the website is redirecting to the conditions page. As soon as I restrict a category, the home page works fine.

I really appreciate any help!

Thanks!

Danielle:

I have installed the latest version of this module in a 1.5.1 store. I merged all the changes, but am having the following issue:

1. If I restrict access to a category, when a customer attempts to go to that category, they are sent to the conditions page, whether they are logged in or not, and whether they have special privileges or not.

Using Developers Tool Kit do a search for

 zen_redirect(zen_href_link(FILENAME_CONDITIONS, '', 'SSL'));

Open the file(s) resulting from your search and change that part of the code to

 zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));

Danielle:

2. If no categories are restricted, the home page of the website is redirecting to the conditions page. As soon as I restrict a category, the home page works fine.

This is one issue with CSAR which I am in the process of resolving. As it stands, one category needs to be restricted for the mod to work as it should. If you don't want to restrict any categories then set this value to something stupid like 100000 - a category that does not exist.

The idea of this plugin is to give store owners the option to restrict one or more categories - whatever but at least one. If you don't want to restrict any categories then the mod is obsolete and should not be installed in the first place.

Hope this helps

Cheers/Frank

Thank you, that helped somewhat, except that customers that are registered AND given special privileges still can't view restricted categories. They were being directed to the conditions page, but now that I made these changes, they are being redirected to the account page (a redirect from the login page since they're already signed in) anytime they view a restricted category, even though they are approved to view it.

frank18:

Using Developers Tool Kit do a search for

zen_redirect(zen_href_link(FILENAME_CONDITIONS, '', 'SSL'));

> 
> Open the file(s) resulting from your search and change that part of the code to
> 
> ```
 zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));

This is one issue with CSAR which I am in the process of resolving. As it stands, one category needs to be restricted for the mod to work as it should. If you don't want to restrict any categories then set this value to something stupid like 100000 - a category that does not exist.

The idea of this plugin is to give store owners the option to restrict one or more categories - whatever but at least one. If you don't want to restrict any categories then the mod is obsolete and should not be installed in the first place.

Hope this helps

Cheers/Frank

Danielle:

Thank you, that helped somewhat, except that customers that are registered AND given special privileges still can't view restricted categories. They were being directed to the conditions page, but now that I made these changes, they are being redirected to the account page (a redirect from the login page since they're already signed in) anytime they view a restricted category, even though they are approved to view it.

Two possibilities:

1. If you are changing the special priviliges of a customer in admin whilst the same customer is still logged into the front end then the changes will not reflect until that customer logs out and then logs back in again. For testing purposes only you may need to reload the page or better even use another browser. See if that is your culprit.

2. In case point 1. does not resolve your issue then I am almost certain that there is a merging error in your installation.

If the site is live please create a dummy customer and assign special privileges to that customer. PM me the login details of that customer and I have a look.

Cheers / Frank

I was logging out and logging in again after the special privileges were assigned. I will send you a PM with the login info.

Thank you!

frank18:

Two possibilities:

1. If you are changing the special priviliges of a customer in admin whilst the same customer is still logged into the front end then the changes will not reflect until that customer logs out and then logs back in again. For testing purposes only you may need to reload the page or better even use another browser. See if that is your culprit.

2. In case point 1. does not resolve your issue then I am almost certain that there is a merging error in your installation.

If the site is live please create a dummy customer and assign special privileges to that customer. PM me the login details of that customer and I have a look.

Cheers / Frank

Danielle:

I was logging out and logging in again after the special privileges were assigned. I will send you a PM with the login info.

Thank you!

Thanks Danielle,

Clicked through all cats w/out problems. None of your categories seem to be access restricted but they are price restricted, I can't see prices. Logged in and clicked through all cats and can see prices and add products to cart.

Only coming to blocks when clicking on the heading 'Wholesale'. Do you have 'Dual Pricing - Wholesale Pricing' installed?

I don't think CSAR itself poses a problem. Are there any other mods installed that may clash with CSAR?

Frank

The Specials category is the restricted one. If you are not logged in and you go to the Specials category, you are taken to the login page, which is fine.

If you are logged in, and DO have special privileges, when you go the Specials category, you are taken to the My Account page, when you should have access to view the Specials category.

If you are logged in, and do not have privileges, you are taken to the My Account page as well.

frank18:

Thanks Danielle,

Clicked through all cats w/out problems. None of your categories seem to be access restricted but they are price restricted, I can't see prices. Logged in and clicked through all cats and can see prices and add products to cart.

Only coming to blocks when clicking on the heading 'Wholesale'. Do you have 'Dual Pricing - Wholesale Pricing' installed?

I don't think CSAR itself poses a problem. Are there any other mods installed that may clash with CSAR?

Frank

Danielle:

The Specials category is the restricted one. If you are not logged in and you go to the Specials category, you are taken to the login page, which is fine.

If you are logged in, and DO have special privileges, when you go the Specials category, you are taken to the My Account page, when you should have access to view the Specials category.

If you are logged in, and do not have privileges, you are taken to the My Account page as well.

It does not appear to take a snapshot and gets trapped in a loop. Not a behaviour I have seen with CSAR installs on other sites. Without analysing the code I can not help further. Could you download the content of the includes folder, zip it up and and email it to the address I am about to PM?

Frank

Danielle, can you set category 16 (bath) as a restricted category (even if only temporary) and report back how this category responds. Reason being that this issue has got me puzzled - despite the local time being already midnight and my bed is waiting for me.....

Thanks / Frank

frank18:

Danielle, can you set category 16 (bath) as a restricted category (even if only temporary) and report back how this category responds. Reason being that this issue has got me puzzled - despite the local time being already midnight and my bed is waiting for me.....

Thanks / Frank

It behaves the same way, if I am not logged in, it takes me to the login page. If I am logged in, it takes me to the My Account page, regardless of whether my user account has special privileges or not.

I have zipped the includes folder and e-mailed it to you.

Thanks!

Danielle:

It behaves the same way, if I am not logged in, it takes me to the login page. If I am logged in, it takes me to the My Account page, regardless of whether my user account has special privileges or not.

I have zipped the includes folder and e-mailed it to you.

Thanks!

Danielle,

I checked your includes folder but can't find anything sinister.

The file that tests for restrictions and privileges is

includes/modules/pages/index/header_php.php

The relevant code at the end of that file is

// ********* bof CATEGORY_RESTRICTION **********
/**
* we want product details of certain categories to be accessible by members only so redirect them to the login page
 */
if (!$_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($current_category_id,explode(',', CATEGORY_RESTRICTION_LOGIN_CATEGORY)) ) {
    $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL')); 
      }

/**
* we are testing if a logged in customer has special privileges to view products in this category
 */
if ($_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($current_category_id,explode(',', CATEGORY_RESTRICTION_LOGIN_CATEGORY)) ) {
    $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
      }
  
/**
* we are testing if a logged in customer has special privileges to view products of a restricted manufacturer
 */
if (!$_SESSION['customers_privileges'] > 0 && in_array($_GET['manufacturers_id'],explode(',', CATEGORY_RESTRICTION_LOGIN_MANUFACTURER)) ) {
    $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL')); 
      }

if ($_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($_GET['manufacturers_id'],explode(',', CATEGORY_RESTRICTION_LOGIN_MANUFACTURER)) ) {
    $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL')); 
      }

// ********* eof CATEGORY_RESTRICTION **********


// This should be last line of the script:
$zco_notifier->notify('NOTIFY_HEADER_END_INDEX');

... and all of that code looks perfectly ok to me in your file

Can you please double check that your admin/customers.php file has been merged correctly. I am beginning to think that special privileges are not being posted to the DB when editing customer details and the customer remains a *normal" customer (no privileges).

Thanks / Frank

Hi Frank,

I checked in phpMyAdmin and I can see that the privileges are being posted. It does save it in the admin as well and shows in the customer list that the customer has privileges.

frank18:

Danielle,

I checked your includes folder but can't find anything sinister.

The file that tests for restrictions and privileges is

The relevant code at the end of that file is

// ********* bof CATEGORY_RESTRICTION **********
/**

• we want product details of certain categories to be accessible by members only so redirect them to the login page
  */
  if (!$_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($current_category_id,explode(',', CATEGORY_RESTRICTION_LOGIN_CATEGORY)) ) {
  $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
  }

/**

• we are testing if a logged in customer has special privileges to view products in this category
  */
  if ($_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($current_category_id,explode(',', CATEGORY_RESTRICTION_LOGIN_CATEGORY)) ) {
  $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
  }

/**

• we are testing if a logged in customer has special privileges to view products of a restricted manufacturer
  */
  if (!$_SESSION['customers_privileges'] > 0 && in_array($_GET['manufacturers_id'],explode(',', CATEGORY_RESTRICTION_LOGIN_MANUFACTURER)) ) {
  $_SESSION['navigation']->set_snapshot();
  zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
  }

if ($_SESSION['customer_id'] && !$_SESSION['customers_privileges'] > 0 && in_array($_GET['manufacturers_id'],explode(',', CATEGORY_RESTRICTION_LOGIN_MANUFACTURER)) ) {
$_SESSION['navigation']->set_snapshot();
zen_redirect(zen_href_link(FILENAME_LOGIN, '', 'SSL'));
}

// ********* eof CATEGORY_RESTRICTION **********

// This should be last line of the script:
$zco_notifier->notify('NOTIFY_HEADER_END_INDEX');

> 
> ... and all of that code looks perfectly ok to me in your file
> 
> Can you please double check that your **admin/customers.php** file has been merged correctly. I am beginning to think that special privileges are not being posted to the DB when editing customer details and the customer remains a *normal" customer (no privileges).
> 
> Thanks / Frank

Just an update that I also just tried restricting by manufacturer instead of category, and when I do that, I can access everything, with or without privileges. It doesn't restrict anything. So it's the exact opposite of if I try and restrict by category, in which case it restricts everything even if I do have privileges. So strange!

Danielle:

Just an update that I also just tried restricting by manufacturer instead of category, and when I do that, I can access everything, with or without privileges. It doesn't restrict anything. So it's the exact opposite of if I try and restrict by category, in which case it restricts everything even if I do have privileges. So strange!

OK I figured it out! It is just the authorization settings in the admin.

We need Customer Approval Status – Authorization Pending set to 2, because we don’t want retail customers to see an add to cart button, checkout, etc. If I set it to 0, the CSAR mod works perfectly. Setting that value to anything else makes the CSAR mod not function correctly.

Just tried to replicate this on my CSAR demo site: I set cust auth to '2' then went to the store front, clicked on a restricted cat and was redirected to the login page. Logged in and I had immediate access - just the same as if cust auth was set to '0'. The status of cust auth should have no bearing on the behaviour of CSAR.

So.... that behaviour is still in contrast to what you are experiencing with your site. There still has to be a clash with one of the other installed mods. As a workaround you may want to set cust auth to '0' AND then enter every single master cat as price restricted (the top line in CSAR admin...). If that works then at least the store can be operational again. It is only a workaround - no permanent solution and tedious if there are lots of categories.....

Cheers / Frank

Well that's bizarre, because none of our mods have anything to do with the customer authorization status either. In any case, I did some custom coding and made a workaround that works for our store.

Thank you for all your help!

frank18:

Just tried to replicate this on my CSAR demo site: I set cust auth to '2' then went to the store front, clicked on a restricted cat and was redirected to the login page. Logged in and I had immediate access - just the same as if cust auth was set to '0'. The status of cust auth should have no bearing on the behaviour of CSAR.

So.... that behaviour is still in contrast to what you are experiencing with your site. There still has to be a clash with one of the other installed mods. As a workaround you may want to set cust auth to '0' AND then enter every single master cat as price restricted (the top line in CSAR admin...). If that works then at least the store can be operational again. It is only a workaround - no permanent solution and tedious if there are lots of categories.....

Cheers / Frank

Danielle:

Well that's bizarre, because none of our mods have anything to do with the customer authorization status either. In any case, I did some custom coding and made a workaround that works for our store.

Thank you for all your help!

No problem Danielle - could you please let me know how you implemented that workaround.

Thanks / Frank