Bug Access to Modcp leads to access everywhere?

Status
Not open for further replies.

sz1

Customer
Hi,

I´ve set up a group that has access to the addon´s modcp. But they can even see categories that they´re not supposed to see (they have no view permissions for them). They can´t access files in those categories but they see the category itself. I want them to be download-moderators only for the categories they have view permissions for. They should not see the other categories.

Is there a quickfix for this? It´s quite urgent for me :/
 
It is designed for users with modcp access to be able to moderate all categories. If you want to add the feature to be able to limit them to view only categories we'll look at it next version.

That said, for now, if you modify the following file
dbtech/downloads_pro/actions/home.php

Find on about line 54

PHP:
    if (!empty($permissions) && (in_array($vbulletin->userinfo['usergroupid'], $permissions['view']) || $canview == true || Downloads::is_mod())) {
and replace with
PHP:
    if (!empty($permissions) && (in_array($vbulletin->userinfo['usergroupid'], $permissions['view']) || $canview == true)) {

That should get what you are looking for.
 
Status
Not open for further replies.

Legacy vBDownloads

vBulletin 3.8.x vBulletin 4.x.x
Seller
DragonByte Technologies
Release date
Last update
Total downloads
1,714
Customer rating
0.00 star(s) 0 ratings
Top