(0000058)
douglasw (administrator)
2008-08-11 11:23
|
Here's the issue: At the bottom of the "auth_phpbb3.php" file is the line :
"define("PAGE_LVL", "profile");
What this means is that when the page loads it will display to anyone who is given the "profile" permission. You probably notice that even when logged in as an unprivileged user you can see the raids, locations, announcements, etc. pages as well. This is because with that line above at the bottom of the phpbb3 authenticator ALL pages are FORCED to use the profile privlidge.
Since "define" in php is a "define once" concept, during each page load a certain variable can only be defined one time. Once "PAGE_LVL" is defined by phpbb3 it cannot be defined by the loading page (as you will see at the top of most of the major php pages). Thus, all pages are forced to the privlidge listed in auth_phpbb3.php.
HOWEVER page level only grants access to see the page, on some of the other pages there are checks for page USE (i.e. regardless of whether or not you can SEE the raid view page you can't queue/dequeue etc. users) that look for things other than page level access.
Download the new auth file, then do me a favor and start over (if you can) either with your test site or with a new site and link to your phpbb installation and see if things are straightened out with all 3 of these issues or not. |