View Issue Details

This issue affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
19198Bug reportsUsability/user experiencepublic2026-08-07 15:13
Reporterbaltzis Assigned Toc_schmitz  
PrioritynoneSeveritypartial_block 
Status feedbackResolutionopen 
Product Version6.3.x 
Summary19198: Permission to browse the server (kcfinder) for uploaded sources denied
Description

Uploaded sources become inaccessible for the user. When trying to browse for uploaded sources (e.g., images), the message "You don't have permission to browse the server" pops up.

Steps To Reproduce

Steps to reproduce

Try to browse any uploaded source (files, images) from within label set or question editor. The message appears when trying to browse for an image in the label set editor, while in the question editor the kcfinder window shows nothing (see screeshot). In the latter case, LimeSurvey hangs and you need to quit the page.

Expected result

The kcfinder window opens and the user can select the desired source.

Actual result

A message appears ("You don't have permission to browse the server") or LimeSurvey freezes.

TagsNo tags attached.
Attached Files
Bug heat4
Complete LimeSurvey version number (& build)6.3.1, build 231023
I will donate to the project if issue is resolvedNo
Story point estimate
BrowserChrome
Database type & versionmysql, version mysqlnd 8.1.2-1ubuntu2.14
Server OS (if known)Linux 5.15.0-84-generic #93-Ubuntu SMP
Webserver software & version (if known)Apache/2.4.52 (Ubuntu)
PHP Version8.1.2-1ubuntu2.14

Users monitoring this issue

There are no users monitoring this issue.

Activities

baltzis

baltzis

2023-11-17 14:56

reporter   ~78510

Finally, I managed find something more specific about this issue: If the user opens any question in any survey and edit it trying to open the resources manager from within the question editor, everything comes back to normal and the kcfinder window works just fine. After that, you the user can use the kcfinder in any other option where available (e.g. to edit label sets or anything else).
BUT if the user attempts to open the kcfinder before opening it in some question within any survey (e.g. trying to modify some label set from the "Configuration" menu), then the message appears saying that the user does not have permissions, or the kcfinder window does not open properly or correctly. I hope this helps.

baltzis

baltzis

2023-11-19 08:52

reporter   ~78523

Additional information on the same issue: when trying to access "Resources" from the menu "Structure" in any survey, I get an incomplete window (see the snapshot) and an endless loop that at some point results in a message saying that the page does not respond.

snapshot 2023-11-19 094450.png (57,742 bytes)   
snapshot 2023-11-19 094450.png (57,742 bytes)   
baltzis

baltzis

2023-11-19 08:53

reporter   ~78524

Sorry... I meant "...from the menu "Settings". Not "Structure"...

baltzis

baltzis

2026-06-25 13:05

reporter   ~85094

It has been found that:

  1. In Firefox, KCFinder works just fine. The issues is related to Chrome.
  2. The new LimeSurvey version 7.0.5 has not resolved the Chrome issue with KCFinder.
baltzis

baltzis

2026-06-26 08:33

reporter   ~85095

Further testing confirms that the issue appears to be specific to Chromium-based browsers.
Test results:

  • Firefox: KCFinder works normally in both regular and private browsing windows.
  • Google Chrome: KCFinder remains incomplete and the LimeSurvey tab eventually becomes unresponsive, both in regular and Incognito mode.
  • Microsoft Edge: the same problem occurs; KCFinder remains incomplete and the tab becomes unresponsive.

The problem persists after:

  • upgrading LimeSurvey to version 7.0.5;
  • clearing the LimeSurvey frontend cache;
  • clearing all LimeSurvey site data in Chrome;
  • disabling the browser cache through Developer Tools;
  • testing in Chrome Incognito mode;
  • disabling hardware acceleration in Chrome;
  • testing the Resources page in a separate browser tab.

In Chrome Developer Tools, the Network panel shows no failed requests, HTTP errors or red entries; the required files appear to load normally. The Console displays the following message:
PJAX -> No JSON found. If you expected it there was an error

Only the tab in which KCFinder is opened becomes unresponsive. Other LimeSurvey administration tabs remain fully functional.

Therefore, this does not appear to be a server-side, PHP-session, file-permission or browser-cache problem. The behaviour points to a KCFinder JavaScript compatibility problem affecting Chromium-based browsers, while Firefox remains unaffected (Edge version: 149.0.4022.80, 64 bit, Chrome version: 149.0.7827.156, 64-bit).

baltzis

baltzis

2026-06-26 13:41

reporter   ~85096

Further testing confirms that the issue appears to be specific to Chromium-based browsers and is not limited to my self-hosted LimeSurvey installation.

Self-hosted installation

The issue occurs in LimeSurvey 7.0.5 on my Ubuntu-based installation:

  • Firefox: KCFinder works normally in both regular and private browsing windows.
  • Google Chrome: KCFinder remains only partially rendered and the LimeSurvey tab eventually becomes unresponsive, both in regular and Incognito mode.
  • Microsoft Edge: the same problem occurs; KCFinder remains incomplete and the tab becomes unresponsive.

The problem persists after:

  • upgrading LimeSurvey to version 7.0.5;
  • clearing the LimeSurvey frontend cache;
  • clearing all LimeSurvey site data in Chrome;
  • disabling the browser cache through Developer Tools;
  • testing in Chrome Incognito mode;
  • disabling hardware acceleration in Chrome;
  • testing the Resources page in a separate browser tab.

In Chrome Developer Tools, the Network panel shows no failed requests, HTTP errors or red entries; the required files appear to load normally. The Console displays the following message:

PJAX -> No JSON found. If you expected it there was an error

Only the tab in which KCFinder is opened becomes unresponsive. Other LimeSurvey administration tabs remain fully functional.

LimeSurvey Cloud installation

I also reproduced exactly the same behaviour in the LimeSurvey-hosted installation provided through a free account on limesurvey.org:

  • in Google Chrome, KCFinder remains partially rendered and the page becomes unresponsive;
  • in Firefox, KCFinder loads and works normally.

Since the problem is reproducible both on a self-hosted Ubuntu installation and on the official LimeSurvey-hosted service, it does not appear to be caused by the local server configuration, PHP settings, file permissions, ModSecurity, browser cache or the upgrade procedure.

The results point to a KCFinder JavaScript compatibility problem affecting Chromium-based browsers, while Firefox remains unaffected.

c_schmitz

c_schmitz

2026-08-07 15:13

administrator   ~85397

I can not reproduce it in Chrome, neither in any CE version 6 or 7 , nor in v6 on LimeSurvey Cloud.
Can you try using another Chrome version? Because it is sounds like a bug in your Chrome version or (less likely) some proxy/firewall issue.

Issue History

Date Modified Username Field Change
2023-10-26 13:13 baltzis New Issue
2023-10-26 13:13 baltzis File Added: screenshot 2023-10-26 141118.png
2023-11-17 14:56 baltzis Note Added: 78510
2023-11-17 14:56 baltzis Bug heat 0 => 2
2023-11-19 08:52 baltzis Note Added: 78523
2023-11-19 08:52 baltzis File Added: snapshot 2023-11-19 094450.png
2023-11-19 08:53 baltzis Note Added: 78524
2026-06-25 13:05 baltzis Note Added: 85094
2026-06-26 08:33 baltzis Note Added: 85095
2026-06-26 13:41 baltzis Note Added: 85096
2026-08-07 15:13 c_schmitz Assigned To => c_schmitz
2026-08-07 15:13 c_schmitz Status new => feedback
2026-08-07 15:13 c_schmitz Note Added: 85397
2026-08-07 15:13 c_schmitz Bug heat 2 => 4