Admin Profiles (for v1.3.x only!) Support Thread

I reverted to a clean installation, installed Image Handler 2 & checked that it was working. It was.

Then I installed Admin Profiles. *Before *I created another user, I tried to open Image Handler 2 in Admin but got:

"Sorry, your security clearance does not allow you to access this resource.Please contact your site administrator if you believe this to be incorrect. Sorry for any inconvenience".

I really need both of these extensions to play nicely together - any suggestions please.

(BTW, I'm doing all this offline in a development envionment called WAMP Server. It's easy to take a backup of each stage, & quicly resore to the previous one when anything does'nt work. This makes it a *lot *easier to try things out)

mike_9000:

I really need both of these extensions to play nicely together - any suggestions pleaseYes. Follow the installation instructions, particularly the step concerning box files, which actually uses Image Handler as an example.

I have installed image handler 2, then Admin Profiles, then replaced the contents of the file admin/includes/boxes/extra_boxes/image_handler_tools_dhtml.php with the following code:

The image handler menu item is still missing from the top-level admin tools menu, & I when I try to use Image Handler 2 through the icon associated with entering a new product I still get:

"Sorry, your security clearance does not allow you to access this resource.Please contact your site administrator if you believe this to be incorrect. Sorry for any inconvenience".

Did you enable Image Handler in Admin Profiles?

I have not made any additional admin accounts.

When I install Admin profile & enter the standard admin (ID: 1) Image Handler is no longer accessible from the menu & the warning comes up if I access it any other way.

Sounds like a "no".

Arrghhh! I'm an idiot.

I didn't think that it might mot be activated in the main admin account.

I have ticked the box & the menu item is back.

I'm creating another account, now to see if that works.

The default install only enables core Zen Cart features and only for the admin ID 1. For anything or anybody else it plays safe and won't display or allow access until it had a positive confirmation that it's OK to do so.

Yes!

It all works now.

I assumed that Image handler would be activated when I installed it. I didn't understand that, once you had installed Admin Profiles, you had to 'tick the box' to show newly installed stuff in your main admin account.

When you asked if I had activated Image Handler, I thought you were asking if I activated it in a secondary account. The answer was so obvious, I didn't see it. :blush:

Thanks so much for your patience, mate.

kuroi:

thanks for reply, ok ive reinstalled everything and have it all going but cant save anything at all in admin ive scim read the forum and im gettin little head spins, ive tried alot of things stated in forum i am number 1 admin out of 2 its just locked me out of saving database if someone could help me here would be :hug:
I am looking but seem to be missing something... :flex:You're going to need to slow down and take a deep breath, maybe a nice cup of tea and then start again, with more specifics

What version of Zen Cart? What Version of Admin Profiles? Do you have the security patches installed? What, precisely can't you save and on what page?[/QUOTE]

I am using the latest zen,
Zen Cart 1.3.8a
Patch: 1::
Database Patch Level: 1.3.8
v1.3.8 [2008-12-06 22:58:52] (Fresh Installation)
v1.3.8 [2008-12-06 22:58:52] (Fresh Installation)

I cant since using the admin addon save any changes in my shop it just goes back to index in shop. that is all catagories including changing admin settings in edit permissions tik box's.
I uploaded your admin fresh this week.
:mellow:

Your help would be much apprieciated :bigups:

mike_9000:

I would be *really *interested in your solution - I have the same problem, having installed image handler 2 after installing Admin profiles...

I already had image handler installed and admin profiles. All was good until after the zen security patch. [I had the problem with not being able to save any chnages]
then I had to install the patch for admin profiles [found here]
I did that and all was good but the box was not there in admin profiles for image handler.
The only thing I did was reuplaod the image handler file
admin\includes\languages\english\extra_definitions\bmz_image_handler.php
and my problem was fixed. I don't know if it will work for you but it is worth a try.

Vortex12:

I cant since using the admin addon save any changes in my shop it just goes back to index in shop. that is all catagories including changing admin settings in edit permissions tik box's.Doesn't sound like an Admin Profiles issue, more likely there was a problem installing the Zen Cart security patch and your admin/includes/functions/html_output.php file didn't get over-written with the patched version.

I am hoping someone can help me! I rarely receive any help from this zen cart forum but Ill give it another shot...

I am trying to set up a store like etsy (for those of you that are familiar)...where sellers create an account and can post/edit their own products. because I couldnt find anything existing software programs that do this I went with zen cart...made it work...and am very happy with the results.

However, I see this add-on now and it gives me hope! Is it possible to tweak this mod or the "Admin Users - Restrict Product Categories" mod to only grant the user access to the products which he/or she creates/created?

For example user logs in...chooses to add product...and then chooses what categories it belongs to...and adds it. Then when they log in next they see that product to edit or add a new one altogether. I dont want them to have access to a whole category because then they could edit another user's products. Any insight anyone has on how I can achieve this atmosphere I would GREATLY appreciate it. I have been trying to make things work for over 8 months now and would love finally be happy with the result.

Thank you
Cody

chelgeson:

I am hoping someone can help me! I rarely receive any help from this zen cart forum but Ill give it another shot...

I am trying to set up a store like etsy (for those of you that are familiar)...where sellers create an account and can post/edit their own products. because I couldnt find anything existing software programs that do this I went with zen cart...made it work...and am very happy with the results.

However, I see this add-on now and it gives me hope! Is it possible to tweak this mod or the "Admin Users - Restrict Product Categories" mod to only grant the user access to the products which he/or she creates/created?

For example user logs in...chooses to add product...and then chooses what categories it belongs to...and adds it. Then when they log in next they see that product to edit or add a new one altogether. I dont want them to have access to a whole category because then they could edit another user's products. Any insight anyone has on how I can achieve this atmosphere I would GREATLY appreciate it. I have been trying to make things work for over 8 months now and would love finally be happy with the result.

Thank you
CodyThis has already been covered several times in this thread, which is why you didn't a response last time you asked it. But since it's been a while, let's go over it again ...

This mod is designed to limit access to pages and not get involved in what goes on within those pages, so wouldn't do what you want. The "Admin Users - Restrict Product Categories" mod seeks to go part way towards what you want, but sadly fails to do so in a secure way.

The current structure of the Zen Cart Admin rather gets in the way of restricting access at any level (which was why Admin Profiles as a partial solution was needed). I expect that this will change when it gets re-written for a future release. I'd be surprised if access control didn't become more central at that point.

However, for the time being this is open source, so you can work through adding all the restrictions needed yourself. I did it once, but it was a ton of work, not a lot of fun, and would need to be re-visited with each release, so there's not a quick fix for this.

kuroi:

The recently-released Admin security patch adds a security token to most forms that update the database. More security is a good thing. However in this case the new security token prevents current versions of Admin Profiles from updating admin user profiles.

Attached is a patch that makes Admin Profiles files compatible with the Zen Cart patch. Simply replace your admin/admin_control.php file with the one in the zip archive below. The Admin Profiles patch will work whether or not you have the Zen Cart security patch installed, and so is recommended.

Attachment #5960

A full updated version of Admin Profiles will be submitted to the downloads area for approval within the next few minutes.

Thanks for this, you saved my bacon! We had the security issue on one of our most important client sites.

SO glad it's fixed. :clap:

Actually... 3rd Party Mods - they won't save any changes made to them. I click 'Save' and it stays on the page as expected, but it doesn't remember that the box is ticked.

Has that issue alread

I just realized something..
On the admin login page, access is denied to the "resend password" page. You get this message:

Sorry, your security clearance does not allow you to access this resource...

I didn't see this listed in the thread but I could have missed it. Any suggestions on how to correct?

thanks

Kuroi,

Thank you for the response! I know this was covered for the admin profiles...and I read through that. But I couldnt find anything on the user restrict addition so thank you for clarifying both for me.

Cody

SirBuck:

I just realized something..
On the admin login page, access is denied to the "resend password" page. You get this message:

Sorry, your security clearance does not allow you to access this resource...

I didn't see this listed in the thread but I could have missed it. Any suggestions on how to correct?

thanksWhich version of Zen Cart? Which version of Admin Profiles?

chelgeson:

Kuroi,

Thank you for the response! I know this was covered for the admin profiles...and I read through that. But I couldnt find anything on the user restrict addition so thank you for clarifying both for me.

CodyYou're welcome. I think it was worth bringing the relevant comments for both together into a single post for a complete answer, even if it's not the one people are hoping for.

:(

kuroi:

Doesn't sound like an Admin Profiles issue, more likely there was a problem installing the Zen Cart security patch and your admin/includes/functions/html_output.php file didn't get over-written with the patched version.

WoW, Thank you very much your a genius, sorry for my late reply. I downloaded the security patch again and uploaded it , walla, that was all it was that fixed my problem with not bieng able to save my admin settings which stuffed around all my other options i was trying to work with.

Thank you heaps for your time and knowledge, great work
double
bigups: