View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
08368 | Bug reports | Authentication | public | 2013-11-14 12:04 | 2013-11-25 15:39 |
Reporter | zmn | Assigned To | abezverkhyy | ||
Priority | normal | Severity | minor | ||
Status | closed | Resolution | fixed | ||
Product Version | 2.05 RC | ||||
Target Version | 2.05+ | Fixed in Version | 2.05+ | ||
Summary | 08368: Issue with user autocreate. | ||||
Description | I've installed 205RC6 version and start Authwebserver plugin. | ||||
Steps To Reproduce |
| ||||
Additional Information | limesurevey 205RC6 In attached is an html file with saved error | ||||
Tags | No tags attached. | ||||
Attached Files | error_CException.html (23,903 bytes)
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>CException</title> <style type="text/css"> /*<![CDATA[*/ html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,font,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td{border:0;outline:0;font-size:100%;vertical-align:baseline;background:transparent;margin:0;padding:0;} body{line-height:1;} ol,ul{list-style:none;} blockquote,q{quotes:none;} blockquote:before,blockquote:after,q:before,q:after{content:none;} :focus{outline:0;} ins{text-decoration:none;} del{text-decoration:line-through;} table{border-collapse:collapse;border-spacing:0;} body { font: normal 9pt "Verdana"; color: #000; background: #fff; } h1 { font: normal 18pt "Verdana"; color: #f00; margin-bottom: .5em; } h2 { font: normal 14pt "Verdana"; color: #800000; margin-bottom: .5em; } h3 { font: bold 11pt "Verdana"; } pre { font: normal 11pt Menlo, Consolas, "Lucida Console", Monospace; } pre span.error { display: block; background: #fce3e3; } pre span.ln { color: #999; padding-right: 0.5em; border-right: 1px solid #ccc; } pre span.error-ln { font-weight: bold; } .container { margin: 1em 4em; } .version { color: gray; font-size: 8pt; border-top: 1px solid #aaa; padding-top: 1em; margin-bottom: 1em; } .message { color: #000; padding: 1em; font-size: 11pt; background: #f3f3f3; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; margin-bottom: 1em; line-height: 160%; } .source { margin-bottom: 1em; } .code pre { background-color: #ffe; margin: 0.5em 0; padding: 0.5em; line-height: 125%; border: 1px solid #eee; } .source .file { margin-bottom: 1em; font-weight: bold; } .traces { margin: 2em 0; } .trace { margin: 0.5em 0; padding: 0.5em; } .trace.app { border: 1px dashed #c00; } .trace .number { text-align: right; width: 2em; padding: 0.5em; } .trace .content { padding: 0.5em; } .trace .plus, .trace .minus { display:inline; vertical-align:middle; text-align:center; border:1px solid #000; color:#000; font-size:10px; line-height:10px; margin:0; padding:0 1px; width:10px; height:10px; } .trace.collapsed .minus, .trace.expanded .plus, .trace.collapsed pre { display: none; } .trace-file { cursor: pointer; padding: 0.2em; } .trace-file:hover { background: #f0ffff; } /*]]>*/ </style> </head> <body> <div class="container"> <h1>CException</h1> <p class="message"> Property "User.create_survey" is not defined. </p> <div class="source"> <p class="file">/var/www/lsurv.portaone.com/qqq/framework/db/ar/CActiveRecord.php(161)</p> <div class="code"><pre><span class="ln">149</span> * PHP setter magic method. <span class="ln">150</span> * This method is overridden so that AR attributes can be accessed like properties. <span class="ln">151</span> * @param string $name property name <span class="ln">152</span> * @param mixed $value property value <span class="ln">153</span> */ <span class="ln">154</span> public function __set($name,$value) <span class="ln">155</span> { <span class="ln">156</span> if($this->setAttribute($name,$value)===false) <span class="ln">157</span> { <span class="ln">158</span> if(isset($this->getMetaData()->relations[$name])) <span class="ln">159</span> $this->_related[$name]=$value; <span class="ln">160</span> else <span class="error"><span class="ln error-ln">161</span> parent::__set($name,$value); </span><span class="ln">162</span> } <span class="ln">163</span> } <span class="ln">164</span> <span class="ln">165</span> /** <span class="ln">166</span> * Checks if a property value is null. <span class="ln">167</span> * This method overrides the parent implementation by checking <span class="ln">168</span> * if the named attribute is null or not. <span class="ln">169</span> * @param string $name the property name or the event name <span class="ln">170</span> * @return boolean whether the property value is null <span class="ln">171</span> */ <span class="ln">172</span> public function __isset($name) <span class="ln">173</span> { </pre></div> </div> <div class="traces"> <h2>Stack Trace</h2> <table style="width:100%;"> <tbody><tr class="trace core collapsed"> <td class="number"> #0 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/db/ar/CActiveRecord.php(161): <strong>CComponent</strong>-><strong>__set</strong>("create_survey", 1) </div> <div class="code"><pre><span class="ln">156</span> if($this->setAttribute($name,$value)===false) <span class="ln">157</span> { <span class="ln">158</span> if(isset($this->getMetaData()->relations[$name])) <span class="ln">159</span> $this->_related[$name]=$value; <span class="ln">160</span> else <span class="error"><span class="ln error-ln">161</span> parent::__set($name,$value); </span><span class="ln">162</span> } <span class="ln">163</span> } <span class="ln">164</span> <span class="ln">165</span> /** <span class="ln">166</span> * Checks if a property value is null. </pre></div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #1 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/core/plugins/Authwebserver/Authwebserver.php(92): <strong>CActiveRecord</strong>-><strong>__set</strong>("create_survey", 1) </div> <div class="code"><pre><span class="ln">87</span> $oUser->password=hash('sha256', createPassword()); <span class="ln">88</span> $oUser->full_name=$aUserProfile['full_name']; <span class="ln">89</span> $oUser->parent_id=1; <span class="ln">90</span> $oUser->lang=$aUserProfile['lang']; <span class="ln">91</span> $oUser->email=$aUserProfile['email']; <span class="error"><span class="ln error-ln">92</span> $oUser->create_survey=$aUserProfile['create_survey']; </span><span class="ln">93</span> $oUser->create_user=$aUserProfile['create_user']; <span class="ln">94</span> $oUser->delete_user=$aUserProfile['delete_user']; <span class="ln">95</span> $oUser->superadmin=$aUserProfile['superadmin']; <span class="ln">96</span> $oUser->configurator=$aUserProfile['configurator']; <span class="ln">97</span> $oUser->manage_template=$aUserProfile['manage_template']; </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #2 </td> <td class="content"> <div class="trace-file"> unknown(0): <strong>Authwebserver</strong>-><strong>newUserSession</strong>() </div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #3 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/libraries/PluginManager/PluginManager.php(171): <strong>call_user_func</strong>(array(Authwebserver, "newUserSession")) </div> <div class="code"><pre><span class="ln">166</span> { <span class="ln">167</span> if (!$event->isStopped() <span class="ln">168</span> && (empty($target) || in_array(get_class($subscription[0]), $target))) <span class="ln">169</span> { <span class="ln">170</span> $subscription[0]->setEvent($event); <span class="error"><span class="ln error-ln">171</span> call_user_func($subscription); </span><span class="ln">172</span> } <span class="ln">173</span> } <span class="ln">174</span> } <span class="ln">175</span> <span class="ln">176</span> return $event; </pre></div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #4 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/core/LSUserIdentity.php(69): <strong>PluginManager</strong>-><strong>dispatchEvent</strong>(PluginEvent, array("Authwebserver")) </div> <div class="code"><pre><span class="ln">64</span> $result->setError(self::ERROR_UNKNOWN_HANDLER); <span class="ln">65</span> } else { <span class="ln">66</span> // Delegate actual authentication to plugin <span class="ln">67</span> $authEvent = new PluginEvent('newUserSession', $this); <span class="ln">68</span> $authEvent->set('identity', $this); <span class="error"><span class="ln error-ln">69</span> App()->getPluginManager()->dispatchEvent($authEvent, array($this->plugin)); </span><span class="ln">70</span> $pluginResult = $authEvent->get('result'); <span class="ln">71</span> if ($pluginResult instanceof LSAuthResult) { <span class="ln">72</span> $result = $pluginResult; <span class="ln">73</span> } else { <span class="ln">74</span> $result->setError(self::ERROR_UNKNOWN_IDENTITY); </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #5 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/controllers/admin/authentication.php(80): <strong>LSUserIdentity</strong>-><strong>authenticate</strong>() </div> <div class="code"><pre><span class="ln">75</span> $event->set('identity', $identity); <span class="ln">76</span> App()->getPluginManager()->dispatchEvent($event, array($authMethod)); <span class="ln">77</span> $identity = $event->get('identity'); <span class="ln">78</span> <span class="ln">79</span> // Now authenticate <span class="error"><span class="ln error-ln">80</span> if ($identity->authenticate()) </span><span class="ln">81</span> { <span class="ln">82</span> FailedLoginAttempt::model()->deleteAttempts(); <span class="ln">83</span> App()->user->setState('plugin', $authMethod); <span class="ln">84</span> $this->getController()->_GetSessionUserRights(Yii::app()->session['loginID']); <span class="ln">85</span> Yii::app()->session['just_logged_in'] = true; </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #6 </td> <td class="content"> <div class="trace-file"> unknown(0): <strong>Authentication</strong>-><strong>index</strong>() </div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #7 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/actions/CAction.php(108): <strong>ReflectionMethod</strong>-><strong>invokeArgs</strong>(Authentication, array()) </div> <div class="code"><pre><span class="ln">103</span> elseif($param->isDefaultValueAvailable()) <span class="ln">104</span> $ps[]=$param->getDefaultValue(); <span class="ln">105</span> else <span class="ln">106</span> return false; <span class="ln">107</span> } <span class="error"><span class="ln error-ln">108</span> $method->invokeArgs($object,$ps); </span><span class="ln">109</span> return true; <span class="ln">110</span> } <span class="ln">111</span> } </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #8 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/core/Survey_Common_Action.php(99): <strong>CAction</strong>-><strong>runWithParamsInternal</strong>(Authentication, ReflectionMethod, array("sa" => "login")) </div> <div class="code"><pre><span class="ln">094</span> $oMethod = new ReflectionMethod($this, $sDefault); <span class="ln">095</span> } <span class="ln">096</span> <span class="ln">097</span> // We're all good to go, let's execute it <span class="ln">098</span> // runWithParamsInternal would automatically get the parameters of the method and populate them as required with the params <span class="error"><span class="ln error-ln">099</span> return parent::runWithParamsInternal($this, $oMethod, $params); </span><span class="ln">100</span> } <span class="ln">101</span> <span class="ln">102</span> /** <span class="ln">103</span> * Some functions have different parameters, which are just an alias of the <span class="ln">104</span> * usual parameters we're getting in the url. This function just populates </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #9 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/CController.php(308): <strong>Survey_Common_Action</strong>-><strong>runWithParams</strong>(array("sa" => "login")) </div> <div class="code"><pre><span class="ln">303</span> { <span class="ln">304</span> $priorAction=$this->_action; <span class="ln">305</span> $this->_action=$action; <span class="ln">306</span> if($this->beforeAction($action)) <span class="ln">307</span> { <span class="error"><span class="ln error-ln">308</span> if($action->runWithParams($this->getActionParams())===false) </span><span class="ln">309</span> $this->invalidActionParams($action); <span class="ln">310</span> else <span class="ln">311</span> $this->afterAction($action); <span class="ln">312</span> } <span class="ln">313</span> $this->_action=$priorAction; </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #10 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/CController.php(286): <strong>CController</strong>-><strong>runAction</strong>(Authentication) </div> <div class="code"><pre><span class="ln">281</span> * @see runAction <span class="ln">282</span> */ <span class="ln">283</span> public function runActionWithFilters($action,$filters) <span class="ln">284</span> { <span class="ln">285</span> if(empty($filters)) <span class="error"><span class="ln error-ln">286</span> $this->runAction($action); </span><span class="ln">287</span> else <span class="ln">288</span> { <span class="ln">289</span> $priorAction=$this->_action; <span class="ln">290</span> $this->_action=$action; <span class="ln">291</span> CFilterChain::create($this,$action,$filters)->run(); </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #11 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/CController.php(265): <strong>CController</strong>-><strong>runActionWithFilters</strong>(Authentication, array()) </div> <div class="code"><pre><span class="ln">260</span> { <span class="ln">261</span> if(($parent=$this->getModule())===null) <span class="ln">262</span> $parent=Yii::app(); <span class="ln">263</span> if($parent->beforeControllerAction($this,$action)) <span class="ln">264</span> { <span class="error"><span class="ln error-ln">265</span> $this->runActionWithFilters($action,$this->filters()); </span><span class="ln">266</span> $parent->afterControllerAction($this,$action); <span class="ln">267</span> } <span class="ln">268</span> } <span class="ln">269</span> else <span class="ln">270</span> $this->missingAction($actionID); </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #12 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/application/controllers/AdminController.php(169): <strong>CController</strong>-><strong>run</strong>("authentication") </div> <div class="code"><pre><span class="ln">164</span> $this->redirect(array('/admin/authentication/sa/login')); <span class="ln">165</span> } <span class="ln">166</span> <span class="ln">167</span> } <span class="ln">168</span> <span class="error"><span class="ln error-ln">169</span> return parent::run($action); </span><span class="ln">170</span> } <span class="ln">171</span> <span class="ln">172</span> /** <span class="ln">173</span> * Routes all the actions to their respective places <span class="ln">174</span> * </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #13 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/CWebApplication.php(282): <strong>AdminController</strong>-><strong>run</strong>("authentication") </div> <div class="code"><pre><span class="ln">277</span> { <span class="ln">278</span> list($controller,$actionID)=$ca; <span class="ln">279</span> $oldController=$this->_controller; <span class="ln">280</span> $this->_controller=$controller; <span class="ln">281</span> $controller->init(); <span class="error"><span class="ln error-ln">282</span> $controller->run($actionID); </span><span class="ln">283</span> $this->_controller=$oldController; <span class="ln">284</span> } <span class="ln">285</span> else <span class="ln">286</span> throw new CHttpException(404,Yii::t('yii','Unable to resolve the request "{route}".', <span class="ln">287</span> array('{route}'=>$route===''?$this->defaultController:$route))); </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #14 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/web/CWebApplication.php(141): <strong>CWebApplication</strong>-><strong>runController</strong>("admin/authentication/sa/login") </div> <div class="code"><pre><span class="ln">136</span> foreach(array_splice($this->catchAllRequest,1) as $name=>$value) <span class="ln">137</span> $_GET[$name]=$value; <span class="ln">138</span> } <span class="ln">139</span> else <span class="ln">140</span> $route=$this->getUrlManager()->parseUrl($this->getRequest()); <span class="error"><span class="ln error-ln">141</span> $this->runController($route); </span><span class="ln">142</span> } <span class="ln">143</span> <span class="ln">144</span> /** <span class="ln">145</span> * Registers the core application components. <span class="ln">146</span> * This method overrides the parent implementation by registering additional core components. </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #15 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/framework/base/CApplication.php(180): <strong>CWebApplication</strong>-><strong>processRequest</strong>() </div> <div class="code"><pre><span class="ln">175</span> public function run() <span class="ln">176</span> { <span class="ln">177</span> if($this->hasEventHandler('onBeginRequest')) <span class="ln">178</span> $this->onBeginRequest(new CEvent($this)); <span class="ln">179</span> register_shutdown_function(array($this,'end'),0,false); <span class="error"><span class="ln error-ln">180</span> $this->processRequest(); </span><span class="ln">181</span> if($this->hasEventHandler('onEndRequest')) <span class="ln">182</span> $this->onEndRequest(new CEvent($this)); <span class="ln">183</span> } <span class="ln">184</span> <span class="ln">185</span> /** </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #16 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div> /var/www/lsurv.portaone.com/qqq/index.php(190): <strong>CApplication</strong>-><strong>run</strong>() </div> <div class="code"><pre><span class="ln">185</span> die (sprintf('%s should be writable by the webserver (755 or 775).', $runtimePath)); <span class="ln">186</span> } <span class="ln">187</span> } <span class="ln">188</span> <span class="ln">189</span> <span class="error"><span class="ln error-ln">190</span> Yii::createApplication('LSYii_Application', $config)->run(); </span><span class="ln">191</span> <span class="ln">192</span> /* End of file index.php */ <span class="ln">193</span> /* Location: ./index.php */</pre></div> </td> </tr> </tbody></table> </div> <div class="version"> 2013-11-14 10:38:47 Apache/2.2.15 (CentOS) <a href="http://www.yiiframework.com/">Yii Framework</a>/1.1.14 </div> </div> <script type="text/javascript"> /*<![CDATA[*/ var traceReg = new RegExp("(^|\\s)trace-file(\\s|$)"); var collapsedReg = new RegExp("(^|\\s)collapsed(\\s|$)"); var e = document.getElementsByTagName("div"); for(var j=0,len=e.length;j<len;j++){ if(traceReg.test(e[j].className)){ e[j].onclick = function(){ var trace = this.parentNode.parentNode; if(collapsedReg.test(trace.className)) trace.className = trace.className.replace("collapsed", "expanded"); else trace.className = trace.className.replace("expanded", "collapsed"); } } } /*]]>*/ </script> </body></html> | ||||
Bug heat | 4 | ||||
Complete LimeSurvey version number (& build) | 131105 | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | Firefox | ||||
Database type & version | mysql Ver 14.14 Distrib 5.1.69, for redhat-linux-gnu (i386) using readline 5.1 | ||||
Server OS (if known) | CentOS 6.4 | ||||
Webserver software & version (if known) | httpd Server version: Apache/2.2.15 (Unix) | ||||
PHP Version | PHP 5.3.3 (cli) (built: Jul 12 2013 20:21:47) | ||||
Here is my attempt at fixing this bug : Could someone who actually uses this plugin test it ? |
|
Fix committed to 2.05 branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=13492 |
|
2.05RC7 released. |
|
LimeSurvey: 2.05 a9b30bc9 2013-11-21 18:08 Details Diff |
Fixed issue 08368: Issue with user autocreate. Dev: authserver plugin was broken because the permission system changed. Dev: authserver ported to the new permission system, its configuration syntax was adapted. Dev: a bypass option was added to setPermissions, in order to allow the creation of new users without being logged in as superadmin. |
Affected Issues 08368 |
|
mod - application/config/config-defaults.php | Diff File | ||
mod - application/core/plugins/Authwebserver/Authwebserver.php | Diff File | ||
mod - application/models/Permission.php | Diff File |
Date Modified | Username | Field | Change |
---|---|---|---|
2013-11-14 12:04 | zmn | New Issue | |
2013-11-14 12:04 | zmn | File Added: error_CException.html | |
2013-11-21 00:24 | c_schmitz | Assigned To | => abezverkhyy |
2013-11-21 00:24 | c_schmitz | Status | new => assigned |
2013-11-21 18:13 | abezverkhyy | Note Added: 27302 | |
2013-11-22 11:28 | c_schmitz | Target Version | => 2.05+ |
2013-11-22 17:20 | abezverkhyy | Changeset attached | => LimeSurvey 2.05 a9b30bc9 |
2013-11-22 17:20 | abezverkhyy | Note Added: 27331 | |
2013-11-22 17:20 | abezverkhyy | Resolution | open => fixed |
2013-11-22 17:28 | abezverkhyy | Status | assigned => resolved |
2013-11-22 17:28 | abezverkhyy | Fixed in Version | => 2.05+ |
2013-11-25 15:39 | c_schmitz | Note Added: 27370 | |
2013-11-25 15:39 | c_schmitz | Status | resolved => closed |