Registered Users getting Admin Access

ace67 · October 18th, 2005, 10:39 PM

My installation is working but I've noticed that it is offering Admin access to level 4 registered users. How can I prevent this?

Also, the upload product option in the menu is only appearing when I have logged in as Administrator. When I log in as a registered user, I don't get the upload option even though the "allow members to rate products" in Admin is set to yes.

Any suggestions?

http://allearsnet.com/reviewpost/index.php

Chuck S · October 18th, 2005, 11:16 PM

I would suggest you sign in as admin and edit your usergroup permissions and set the proper permissions you want.

The queries are pretty absolute here on install for an internal install. You would have had to actually go in and set registered users to admin access as on install they do not have admin access only admin does

Code:

Content visible to verified customers only.

ace67 · October 19th, 2005, 07:29 AM

Okay, I understand that. But what I'm showing you in the above URL is an out-of-the-box bare bones install. Nothing has been edited or changed save for the config file for database login. And still registered users are getting the Admin option. Try registering yourself and see. There's definitely a problem somewhere. The reg users appear in the DB as level 4. So the problem has to be in the script somewhere. Any thoughts?

How about the second part of my question pertaining to the upload product option? I can't believe that only administrators can upload new product reviews.

Chuck S · October 19th, 2005, 08:52 AM

I posted the query above to show you the EXACT QUERY. I did a bare bones install and registered user's do not have admin access

The only way I see that registered users can get admin access is as I stated. You would have had to accidently set them to it when editing usergroup permissions

ace67 · October 19th, 2005, 10:58 AM

Traced the problem down to the "edit usergroups" section of the admin. The registered users was set to yes for "mod access" and according to your cut and paste above it should have been on no. That seems to have fixed it.

Next question, how can I disable showing the "Member List" option to registered users? I don't want anyone having access to that but the administrators.