Admin Profiles (for v1.3.x only!) Support Thread

jupitergardens:

I just installed admin users restrict product categories.
This thread is support for the "Admin Profiles" module - -
Is there another module for restricting product by categories??

If not:

jupitergardens:

When I go to permissions, I see, categories at the bottom, but none of my two test categories are listed. How do I restrict by categories?
This module is not designed to turn Zen Cart into a shared/mall type of script where many can enter their own products -
Zen Cart is designed to sell your own products

kobra:

This thread is support for the "Admin Profiles" module - -
Is there another module for restricting product by categories??

If not:

This module is not designed to turn Zen Cart into a shared/mall type of script where many can enter their own products -
Zen Cart is designed to sell your own products

The module I downloaded was called "admin_users_restrict_product_categories" and inside it was the folder "admin_profiles_v1_0_8" which said at the top of the install.txt file "Install Notes for Admin Profiles v1.0.8
This version differs from 1.0.7 as categories permissions added." And the support thread link is this one.

Reading that, it makes me think that I can restrict admin users as to specific categories of products.

Thanks.

jupitergardens:

The module I downloaded was called "admin_users_restrict_product_categories"
Sorry, I had not seen that Module!!

But the Author has not created a Support thread??
Admin Users - Restrict Product Categories
Author: Archelay
Support Thread none

Admin Profiles
Author: Kuroi
Support Thread at http://www.zen-cart.com/forum/showthread.php?t=35911

Maybe, Kuroi will answer for it???

kobra:

Sorry, I had not seen that Module!!

But the Author has not created a Support thread??
Admin Users - Restrict Product Categories
Author: Archelay
Support Thread none

Admin Profiles
Author: Kuroi
Support Thread at http://www.zen-cart.com/forum/showthread.php?t=35911

Maybe, Kuroi will answer for it???

Yeah, I was startled, to say the least, when the support thread led here. Perhaps the author just left in the admin profiles info, because the admin profiles wiki was also given. :(

jupitergardens:

I just installed admin users restrict product categories. When I go to permissions, I see, categories at the bottom, but none of my two test categories are listed. How do I restrict by categories?As Kobra says, this is not the support thread for that mod. I don't believe that there is one. Nor do I recommend use of the mod.

The background is that the author of the "admin users restrict product categories" conceived of it as an extension to Admin Profiles and submitted it as a new version of AP (this is why you find references to AP in its documentation). Normally this would be fine and his enterprise was certainly appreciated. Unfortunately, the approach was deeply flawed. It does what it claims to do in a very limited way only, leaving open a number of ways to circumvent the restrictions.

This caused concern to me and this forum's administrators, since Admin Profiles is a key security tool for many site, so to for the "latest" version to be inherently insecure would be a major issue for many Zen Cart users. The decision taken was to "fork" the mod so that the existing Admin Profiles would continue to be available for those wanting a well-proven and secure solution and the new functionality would be available separately for those prepared to take a chance or to help develop it into something more secure.

I explained privately to the new mod's author the weaknesses in the approach and the work that would be needed to plug them, and to maintain the mod. Sadly he appears to have decided that this is too big a commitment. However, I understand as it involves a large number of changes across multiple parts of the Admin, would be virtually unmaintainable and would likely be overwhelming in terms of the support that would be needed for users.

Not an answer to your question I'm afraid. More a recommendation not to use that mod.

numinix:

I'd like to report a bug with Admin Profiles.

I've installed the latest version for a client and some of the checkboxes cannot be saved as checked. There is something in common with each of the names of the checkboxes, they all have a "." in the name:

• m1 fua.admin
• m1 performance.admin
• m1 performance.admin

Other M1 modules work fine:

• m1 brokerbin

Any ideas?Not sure that I would categorize this as a bug. M1 macros are written for various carts and then hacked (in different ways each time it seems) to work with Zen Cart. As a result they do various things that are at variance with Zen Cart standards including using a variety of file different naming conventions. I think that I may already have dealt with this one in my Pro version of AP. If so I'll whip the code out and make it a patch for the free version. Hopefully, will be able to get to that later today.

kuroi:

Not an answer to your question I'm afraid. More a recommendation not to use that mod.

Actually, Kuroi, that is an answer to my question, so THANK YOU. Alas, it probably means that Zen Cart isn't for me, but that does answer my question. So thanks!

Everything for admin profiles was installed but when I go to Admin Setting and Click on Permissions and click select all for the 3rd party add-ons to be allowed and click save changes, nothing happens, it still gives me security clearance error, and I need to use my add-ons asap! Otherwise please help me with removing admin profiles. Thank you.

kuroi:

Not sure that I would categorize this as a bug. M1 macros are written for various carts and then hacked (in different ways each time it seems) to work with Zen Cart. As a result they do various things that are at variance with Zen Cart standards including using a variety of file different naming conventions. I think that I may already have dealt with this one in my Pro version of AP. If so I'll whip the code out and make it a patch for the free version. Hopefully, will be able to get to that later today.
Sounds great Kuroi, thank you for looking into this.

If this is not a support thread for the Admin Profiles - Restricted Categories mod, and it is not recommended to use that mod due to serious "flaws" in the code, then just what are we to do once we have that mod installed and it malfunctions?

Why is the mod available for download if it's not recommended?? Now I have a customer who has come to me looking to fix the issues she is having with this mod (which was installed for her by someone else).

It would alleviate a LOT of hassle for zen-cart owners to not be offered junk mods that are KNOWN to be flawed. Why, when it was found to be flawed and known to not be supported, was it left for us to download? Just curious.

So, I have just now downloaded this mod to try and figure out how I might help my customer fix her issue (the changes made to the settings no longer "take") and in my investigative journey I have been led here.

Anyone know how/why changes to settings would no longer take? Barring being able to fix it for lack of a support thread, does anyone know how she might uninstall it?

Thanks for any help. Sorry to post for help here, but there is no other link in the documentation specified.

I have the latest update on zen but all of sudden we are no longer allowed to change the permissions OR add permissions to admin profile.

I know I'm most likely not explaining this well but if you go into zen then tools then admin settings choose an admins name and click on edit permissions we have always been able to turn on and off parts of our zen cart to our designers now it will not allow us to change any permission or add any permissions. You can add a new admin's name but it will not allow any permissions to be saved.

Any help would be greatly appreciated.

***I am sorry I posted I did not realize that signs had post... they are the great folks helping me with this please disregard this post.

signs:

If this is not a support thread for the Admin Profiles - Restricted Categories mod, and it is not recommended to use that mod due to serious "flaws" in the code, then just what are we to do once we have that mod installed and it malfunctions?I recommend that people not use it, as it doesn't achieve what it sets out to achieve and can wrongly cause site owners to think that they are more secure than they are. That's not an official Zen Cart position. The Zen Cart team don't normally take positions on the quality of add-ons. There are over a thousand and there's no way that they could thoroughly vet all of them. I do recommend doing a search on any add-on before installing it.

signs:

Why is the mod available for download if it's not recommended?? Now I have a customer who has come to me looking to fix the issues she is having with this mod (which was installed for her by someone else).Mods, good, bad and indifferent that are contributed by the Zen Cart community are made available. Even if they're bad, the approach may be of use to somebody else who then sorts out the problems. Some of the best mods available today have evolved this way.

signs:

It would alleviate a LOT of hassle for zen-cart owners to not be offered junk mods that are KNOWN to be flawed. Why, when it was found to be flawed and known to not be supported, was it left for us to download? Just curious.I wouldn't actually characterize it as junk, just flawed. The Zen Cart team would not normally know if a mod is supported or not. In this case that's just my personal observation that nobody other than me seems to be answering questions about it at the moment.

signs:

So, I have just now downloaded this mod to try and figure out how I might help my customer fix her issue (the changes made to the settings no longer "take") and in my investigative journey I have been led here. Anyone know how/why changes to settings would no longer take? Barring being able to fix it for lack of a support thread, does anyone know how she might uninstall it?Kelin's post just after yours suggests that the mod was working. I rather wonder whether it suffered the same incompatibility with the Zen cart Cart security patch as did Admin Profiles. The change to make AP work was to use the official Zen Cart form building function. Uninstallation is probably similar to that for Admin Profiles, which is described in post #745 above.

signs,

signs:

All things in your post
At the very entrance to the downloads section is this warning:
Community contributed additions for your shop. USE AT YOUR OWN RISK - No warranty expressed nor implied.
All of these are 3rd Party - and you can also locate on the www probably a 1,000+ more.
The ZenCart team has allowed the space and the bandwidth to host these in one locale and if an author desires to support it also a central community for issues
The RULE as it is in most thing is

******************** CAVEAT EMPTOR ********************

Or as Kurio more eloquently states it - do your reasearch

Zen Cart is open source. It is incredibly easy to use and well supported for an open source application. Any ideas about what Zen Cart 'should' or 'shouldn't' do are missing the point of the open source concept.

But this is probably part of a different thread....

My apologies.:blush: I should have waited and let the frustration just wash over me and come to a more "zen" like attitude before posting. Had I done so, I would have told myself all those things about "use at your own risk", "open source", "nobody could possibly police all the mods and all the possible mod/cart version combinations to know what works and doesn't".

Sorry, just hadn't had enough coffee yet and was hoping that since there was a link to a support thread that it really did have one.

I love zen-cart and appreciate all the big brained people who contribute.:D

Just wish that mod functioned as it said. :shocking:

Kuroi, did you figure out how to recover from what happened to AP after the patch?

kuroi and all the other big brains here. signs was not mad at zen or anyone here. She did not install my zen I just dumped it in her lap when something went wrong... she was angry at the person who installed this mod and did NO research before installing it...

Does anyone have any mods that I could replace this mod with? Any help at all? All I want is add admins and they not see or have access to parts of my zen... granted the ladies in my store are not big brains and would not be poking around in zen trying to hack the mod to get to the areas that I was blocking... heck guys I have to talk them through loading their products... they are great ladies - but they are designers of digital art not computer wizards.

Any help would be GREATLY appreciated.

Well, admin profiles is a great mod (with no extra addons :smile:)and does pretty much what you require. You just won't be able to restrict your users from seeing other user's categories.

But as you say they are all great girls so why would that be a problem? What admin profiles is great for is letting them upload products without you, or them, having to worry about messing the site up. You can just give them access to the products and category section.

I've run shops like that and would just say that it is worth putting together an 'idiots guide to uploading products'.

If I was you I would uninstall all the admin profiles stuff and then re-install a clean version - remembering the patch for the recent security patch :smile:

As, I said my open source rant was best left to another thread. So, apologies for that :blush:

Well, here I am with some of the previous people who installed the recent security patch and when we went to add an admin permission, it was not saved.

So, I found this thread, and the first thing I saw was the admin_control.php download from the author for an instant patch. So I downloaded it.

But alas, that gives me an SQL error:
1146 Table 'zzzzzzz_sandbox.TABLE_ADMIN_ALLOWED' doesn't exist
in:
[select * from TABLE_ADMIN_ALLOWED where page_id = '1' and admin_id = '3']
If you were entering information, press the BACK button in your browser and re-check the information you had entered to be sure you left no blank fields.

I downloaded the complete new one from the add-ons page, installed from the extras directory - there were just a couple files, but admin_control.php was not one of them.

If I revert my admin_control.php file, the sql error goes away, but it does not save the change I request.

I don't know what I've missed here, but I could use a sane voice to get me past this. Pretty please with ... ice cream?!

Thank you in advance for any assistance,
deb

signs:

My apologies.Not needed in my book. Your frustration was understood and my replies intended to explain rather than criticise.

signs:

Kuroi, did you figure out how to recover from what happened to AP after the patch?Yes. There's a patch file a little way up this thread and included in the latest release of AP.

But here's what you might want to try in the admin/admin_control.php file of mod you're using ...

find the line

<form id="profileBoxes" name="profileBoxes" action="admin_control.php?adminID=<?php echo $adminID; ?>&action=save" method="post">
```and replace it with```php
<?php echo zen_draw_form('profileBoxes', FILENAME_ADMIN_CONTROL, 'adminID=' . $adminID . '&action=save', 'post', 'id="profileBoxes"', 'true'); ?>

As a way of guiding kelin's ladies to the right places to make their changes, it's OK. If they're technical and malicious then they would be able to circumvent it, but it's still better than nothing or vanilla AP.

Debbers:

Well, here I am with some of the previous people who installed the recent security patch and when we went to add an admin permission, it was not saved.

So, I found this thread, and the first thing I saw was the admin_control.php download from the author for an instant patch. So I downloaded it.

But alas, that gives me an SQL error:
1146 Table 'zzzzzzz_sandbox.TABLE_ADMIN_ALLOWED' doesn't exist
in:
[select * from TABLE_ADMIN_ALLOWED where page_id = '1' and admin_id = '3']Deb

The offer of ice cream always helps. Here's what I think has happened. I think that like kalin/signs in recent posts you don't have Admin Profiles installed, you actually have the Admin Restrict Product Categories. Unfortunately the author of that fork from Admin Profiles renamed one of the tables. I can see why, and understand, but it does make an installation of that mod incompatible with the main Admin Profiles stream.

If my hypothesis is correct, then the patch I did for AP won't work for you. However (and I haven't tested this) the single line change that I posted immediately prior to this post probably will.