06928: CDbException when attempting to access 'Participant Panel' as a restricted user

This bug affects 1 person(s).

ID	Project	Category	View Status	Date Submitted	Last Update

06928	Bug reports	Survey participants (Tokens)	public	2012-11-22 11:25	2012-11-27 06:11

Reporter	pfpDave	Assigned To	c_schmitz
Priority	normal	Severity	minor
Status	closed	Resolution	fixed
Product Version	2.00+
Fixed in Version	2.00+

Summary	06928: CDbException when attempting to access 'Participant Panel' as a restricted user
Description	I've created a user with the following global permissions: Create Survey Participant Panel The user also has the following permissions to one survey: Responses(All) Statistics Survey Content(All) Survey Settings(All) Tokens(All) When the user logs in, they see a Central Participant Database Panel button, when they click this they get the error: CDbCommand failed to execute the SQL statement: SQLSTATE[07002]: [Microsoft][SQL Server Native Client 11.0]COUNT field incorrect or syntax error. The SQL statement executed was: SELECT [participants].*, [participant_shares].[can_edit] FROM [participants] LEFT JOIN [participant_shares] ON participants.participant_id=participant_shares.participant_id WHERE owner_uid = :userid OR share_uid = :userid Full exception attached.
Tags	No tags attached.
Attached Files	CDbException.htm (22,212 bytes) <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <title>CDbException</title> <style type="text/css"> /<![CDATA[/ html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,font,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td{border:0;outline:0;font-size:100%;vertical-align:baseline;background:transparent;margin:0;padding:0;} body{line-height:1;} ol,ul{list-style:none;} blockquote,q{quotes:none;} blockquote:before,blockquote:after,q:before,q:after{content:none;} :focus{outline:0;} ins{text-decoration:none;} del{text-decoration:line-through;} table{border-collapse:collapse;border-spacing:0;} body { font: normal 9pt "Verdana"; color: #000; background: #fff; } h1 { font: normal 18pt "Verdana"; color: #f00; margin-bottom: .5em; } h2 { font: normal 14pt "Verdana"; color: #800000; margin-bottom: .5em; } h3 { font: bold 11pt "Verdana"; } pre { font: normal 11pt Menlo, Consolas, "Lucida Console", Monospace; } pre span.error { display: block; background: #fce3e3; } pre span.ln { color: #999; padding-right: 0.5em; border-right: 1px solid #ccc; } pre span.error-ln { font-weight: bold; } .container { margin: 1em 4em; } .version { color: gray; font-size: 8pt; border-top: 1px solid #aaa; padding-top: 1em; margin-bottom: 1em; } .message { color: #000; padding: 1em; font-size: 11pt; background: #f3f3f3; -webkit-border-radius: 10px; -moz-border-radius: 10px; border-radius: 10px; margin-bottom: 1em; line-height: 160%; } .source { margin-bottom: 1em; } .code pre { background-color: #ffe; margin: 0.5em 0; padding: 0.5em; line-height: 125%; border: 1px solid #eee; } .source .file { margin-bottom: 1em; font-weight: bold; } .traces { margin: 2em 0; } .trace { margin: 0.5em 0; padding: 0.5em; } .trace.app { border: 1px dashed #c00; } .trace .number { text-align: right; width: 2em; padding: 0.5em; } .trace .content { padding: 0.5em; } .trace .plus, .trace .minus { display:inline; vertical-align:middle; text-align:center; border:1px solid #000; color:#000; font-size:10px; line-height:10px; margin:0; padding:0 1px; width:10px; height:10px; } .trace.collapsed .minus, .trace.expanded .plus, .trace.collapsed pre { display: none; } .trace-file { cursor: pointer; padding: 0.2em; } .trace-file:hover { background: #f0ffff; } /]]>/ </style> </head> <body> <div class="container"> <h1>CDbException</h1> <p class="message"> CDbCommand failed to execute the SQL statement: SQLSTATE[07002]: [Microsoft][SQL Server Native Client 11.0]COUNT field incorrect or syntax error. The SQL statement executed was: SELECT [participants]., [participant_shares].[can_edit]<br /> FROM [participants]<br /> LEFT JOIN [participant_shares] ON participants.participant_id=participant_shares.participant_id<br /> WHERE owner_uid = :userid OR share_uid = :userid </p> <div class="source"> <p class="file">C:\limesurvey\framework\db\CDbCommand.php(528)</p> <div class="code"><pre><span class="ln">516</span> return $result; <span class="ln">517</span> } <span class="ln">518</span> catch(Exception $e) <span class="ln">519</span> { <span class="ln">520</span> if($this->_connection->enableProfiling) <span class="ln">521</span> Yii::endProfile('system.db.CDbCommand.query('.$this->getText().$par.')','system.db.CDbCommand.query'); <span class="ln">522</span> $errorInfo = $e instanceof PDOException ? $e->errorInfo : null; <span class="ln">523</span> $message = $e->getMessage(); <span class="ln">524</span> Yii::log(Yii::t('yii','CDbCommand::{method}() failed: {error}. The SQL statement executed was: {sql}.', <span class="ln">525</span> array('{method}'=>$method, '{error}'=>$message, '{sql}'=>$this->getText().$par)),CLogger::LEVEL_ERROR,'system.db.CDbCommand'); <span class="ln">526</span> if(YII_DEBUG) <span class="ln">527</span> $message .= '. The SQL statement executed was: '.$this->getText().$par; <span class="error"><span class="ln error-ln">528</span> throw new CDbException(Yii::t('yii','CDbCommand failed to execute the SQL statement: {error}', </span><span class="ln">529</span> array('{error}'=>$message)),(int)$e->getCode(),$errorInfo); <span class="ln">530</span> } <span class="ln">531</span> } <span class="ln">532</span> <span class="ln">533</span> /* <span class="ln">534</span> * Builds a SQL SELECT statement from the given query specification. <span class="ln">535</span> * @param array $query the query specification in name-value pairs. The following <span class="ln">536</span> * query options are supported: {@link select}, {@link distinct}, {@link from}, <span class="ln">537</span> * {@link where}, {@link join}, {@link group}, {@link having}, {@link order}, <span class="ln">538</span> * {@link limit}, {@link offset} and {@link union}. <span class="ln">539</span> * @return string the SQL statement <span class="ln">540</span> * @since 1.1.6 </pre></div> </div> <div class="traces"> <h2>Stack Trace</h2> <table style="width:100%;"> <tr class="trace core collapsed"> <td class="number"> #0 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\db\CDbCommand.php(390): <strong>CDbCommand</strong>-><strong>queryInternal</strong>("fetchAll", array(2), array()) </div> <div class="code"><pre><span class="ln">385</span> * An empty array is returned if the query results in nothing. <span class="ln">386</span> * @throws CException execution failed <span class="ln">387</span> / <span class="ln">388</span> public function queryAll($fetchAssociative=true,$params=array()) <span class="ln">389</span> { <span class="error"><span class="ln error-ln">390</span> return $this->queryInternal('fetchAll',$fetchAssociative ? $this->_fetchMode : PDO::FETCH_NUM, $params); </span><span class="ln">391</span> } <span class="ln">392</span> <span class="ln">393</span> /* <span class="ln">394</span> * Executes the SQL statement and returns the first row of the result. <span class="ln">395</span> * This is a convenient method of {@link query} when only the first row of data is needed. </pre></div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #1 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\application\models\Participants.php(189): <strong>CDbCommand</strong>-><strong>queryAll</strong>() </div> <div class="code"><pre><span class="ln">184</span> ->select('{{participants}}.,{{participant_shares}}.can_edit') <span class="ln">185</span> ->from('{{participants}}') <span class="ln">186</span> ->leftJoin('{{participant_shares}}', '{{participants}}.participant_id={{participant_shares}}.participant_id') <span class="ln">187</span> ->where('owner_uid = :userid OR share_uid = :userid') <span class="ln">188</span> ->bindParam(":userid", $userid, PDO::PARAM_INT) <span class="error"><span class="ln error-ln">189</span> ->queryAll()); </span><span class="ln">190</span> } <span class="ln">191</span> <span class="ln">192</span> function getParticipantsWithoutLimit() <span class="ln">193</span> { <span class="ln">194</span> return Yii::app()->db->createCommand()->select('')->from('{{participants}}')->queryAll(); </pre></div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #2 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\application\controllers\admin\participantsaction.php(99): <strong>Participants</strong>-><strong>getParticipantsOwnerCount</strong>(3) </div> <div class="code"><pre><span class="ln">094</span> $iTotalRecords = Participants::model()->count(); <span class="ln">095</span> } <span class="ln">096</span> // if not only the participants on which he has right on (shared and owned) <span class="ln">097</span> else <span class="ln">098</span> { <span class="error"><span class="ln error-ln">099</span> $iTotalRecords = Participants::model()->getParticipantsOwnerCount($iUserID); </span><span class="ln">100</span> } <span class="ln">101</span> <span class="ln">102</span> // gets the count of participants, their attributes and other such details <span class="ln">103</span> $aData = array( <span class="ln">104</span> 'totalrecords' => $iTotalRecords, </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #3 </td> <td class="content"> <div class="trace-file">  unknown(0): <strong>participantsaction</strong>-><strong>index</strong>() </div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #4 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\actions\CAction.php(107): <strong>ReflectionMethod</strong>-><strong>invokeArgs</strong>(participantsaction, array()) </div> <div class="code"><pre><span class="ln">102</span> else if($param->isDefaultValueAvailable()) <span class="ln">103</span> $ps[]=$param->getDefaultValue(); <span class="ln">104</span> else <span class="ln">105</span> return false; <span class="ln">106</span> } <span class="error"><span class="ln error-ln">107</span> $method->invokeArgs($object,$ps); </span><span class="ln">108</span> return true; <span class="ln">109</span> } <span class="ln">110</span> } </pre></div> </td> </tr> <tr class="trace app expanded"> <td class="number"> #5 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\application\core\Survey_Common_Action.php(82): <strong>CAction</strong>-><strong>runWithParamsInternal</strong>(participantsaction, ReflectionMethod, array("sa" => "index")) </div> <div class="code"><pre><span class="ln">77</span> $oMethod = new ReflectionMethod($this, $sDefault); <span class="ln">78</span> } <span class="ln">79</span> <span class="ln">80</span> // We're all good to go, let's execute it <span class="ln">81</span> // runWithParamsInternal would automatically get the parameters of the method and populate them as required with the params <span class="error"><span class="ln error-ln">82</span> return parent::runWithParamsInternal($this, $oMethod, $params); </span><span class="ln">83</span> } <span class="ln">84</span> <span class="ln">85</span> /** <span class="ln">86</span> * Some functions have different parameters, which are just an alias of the <span class="ln">87</span> * usual parameters we're getting in the url. This function just populates </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #6 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\CController.php(309): <strong>Survey_Common_Action</strong>-><strong>runWithParams</strong>(array("sa" => "index")) </div> <div class="code"><pre><span class="ln">304</span> { <span class="ln">305</span> $priorAction=$this->_action; <span class="ln">306</span> $this->_action=$action; <span class="ln">307</span> if($this->beforeAction($action)) <span class="ln">308</span> { <span class="error"><span class="ln error-ln">309</span> if($action->runWithParams($this->getActionParams())===false) </span><span class="ln">310</span> $this->invalidActionParams($action); <span class="ln">311</span> else <span class="ln">312</span> $this->afterAction($action); <span class="ln">313</span> } <span class="ln">314</span> $this->_action=$priorAction; </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #7 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\CController.php(287): <strong>CController</strong>-><strong>runAction</strong>(participantsaction) </div> <div class="code"><pre><span class="ln">282</span> * @see runAction <span class="ln">283</span> / <span class="ln">284</span> public function runActionWithFilters($action,$filters) <span class="ln">285</span> { <span class="ln">286</span> if(empty($filters)) <span class="error"><span class="ln error-ln">287</span> $this->runAction($action); </span><span class="ln">288</span> else <span class="ln">289</span> { <span class="ln">290</span> $priorAction=$this->_action; <span class="ln">291</span> $this->_action=$action; <span class="ln">292</span> CFilterChain::create($this,$action,$filters)->run(); </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #8 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\CController.php(266): <strong>CController</strong>-><strong>runActionWithFilters</strong>(participantsaction, array()) </div> <div class="code"><pre><span class="ln">261</span> { <span class="ln">262</span> if(($parent=$this->getModule())===null) <span class="ln">263</span> $parent=Yii::app(); <span class="ln">264</span> if($parent->beforeControllerAction($this,$action)) <span class="ln">265</span> { <span class="error"><span class="ln error-ln">266</span> $this->runActionWithFilters($action,$this->filters()); </span><span class="ln">267</span> $parent->afterControllerAction($this,$action); <span class="ln">268</span> } <span class="ln">269</span> } <span class="ln">270</span> else <span class="ln">271</span> $this->missingAction($actionID); </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #9 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\application\controllers\AdminController.php(159): <strong>CController</strong>-><strong>run</strong>("participants") </div> <div class="code"><pre><span class="ln">154</span> Yii::app()->session['redirectopage'] = Yii::app()->request->requestUri; <span class="ln">155</span> <span class="ln">156</span> $this->redirect($this->createUrl('/admin/authentication/login')); <span class="ln">157</span> } <span class="ln">158</span> <span class="error"><span class="ln error-ln">159</span> return parent::run($action); </span><span class="ln">160</span> } <span class="ln">161</span> <span class="ln">162</span> /* <span class="ln">163</span> * Routes all the actions to their respective places <span class="ln">164</span> * </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #10 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\CWebApplication.php(276): <strong>AdminController</strong>-><strong>run</strong>("participants") </div> <div class="code"><pre><span class="ln">271</span> { <span class="ln">272</span> list($controller,$actionID)=$ca; <span class="ln">273</span> $oldController=$this->_controller; <span class="ln">274</span> $this->_controller=$controller; <span class="ln">275</span> $controller->init(); <span class="error"><span class="ln error-ln">276</span> $controller->run($actionID); </span><span class="ln">277</span> $this->_controller=$oldController; <span class="ln">278</span> } <span class="ln">279</span> else <span class="ln">280</span> throw new CHttpException(404,Yii::t('yii','Unable to resolve the request "{route}".', <span class="ln">281</span> array('{route}'=>$route===''?$this->defaultController:$route))); </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #11 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\web\CWebApplication.php(135): <strong>CWebApplication</strong>-><strong>runController</strong>("admin/participants/sa/index") </div> <div class="code"><pre><span class="ln">130</span> foreach(array_splice($this->catchAllRequest,1) as $name=>$value) <span class="ln">131</span> $_GET[$name]=$value; <span class="ln">132</span> } <span class="ln">133</span> else <span class="ln">134</span> $route=$this->getUrlManager()->parseUrl($this->getRequest()); <span class="error"><span class="ln error-ln">135</span> $this->runController($route); </span><span class="ln">136</span> } <span class="ln">137</span> <span class="ln">138</span> /** <span class="ln">139</span> * Registers the core application components. <span class="ln">140</span> * This method overrides the parent implementation by registering additional core components. </pre></div> </td> </tr> <tr class="trace core collapsed"> <td class="number"> #12 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\framework\base\CApplication.php(162): <strong>CWebApplication</strong>-><strong>processRequest</strong>() </div> <div class="code"><pre><span class="ln">157</span> / <span class="ln">158</span> public function run() <span class="ln">159</span> { <span class="ln">160</span> if($this->hasEventHandler('onBeginRequest')) <span class="ln">161</span> $this->onBeginRequest(new CEvent($this)); <span class="error"><span class="ln error-ln">162</span> $this->processRequest(); </span><span class="ln">163</span> if($this->hasEventHandler('onEndRequest')) <span class="ln">164</span> $this->onEndRequest(new CEvent($this)); <span class="ln">165</span> } <span class="ln">166</span> <span class="ln">167</span> /* </pre></div> </td> </tr> <tr class="trace app collapsed"> <td class="number"> #13 </td> <td class="content"> <div class="trace-file"> <div class="plus">+</div> <div class="minus">–</div>  C:\limesurvey\index.php(178): <strong>CApplication</strong>-><strong>run</strong>() </div> <div class="code"><pre><span class="ln">173</span> * <span class="ln">174</span> / <span class="ln">175</span> require_once BASEPATH . 'yii' . EXT; <span class="ln">176</span> require_once APPPATH . 'core/LSYii_Application' . EXT; <span class="ln">177</span> <span class="error"><span class="ln error-ln">178</span> Yii::createApplication('LSYii_Application', APPPATH . 'config/config' . EXT)->run(); </span><span class="ln">179</span> <span class="ln">180</span> / End of file index.php / <span class="ln">181</span> / Location: ./index.php / </pre></div> </td> </tr> </table> </div> <div class="version"> 2012-11-22 10:25:49 Microsoft-IIS/7.5 <a href="http://www.yiiframework.com/">Yii Framework</a>/1.1.10 </div> </div> <script type="text/javascript"> /<![CDATA[/ var traceReg = new RegExp("(^\|\\s)trace-file(\\s\|$)"); var collapsedReg = new RegExp("(^\|\\s)collapsed(\\s\|$)"); var e = document.getElementsByTagName("div"); for(var j=0,len=e.length;j<len;j++){ if(traceReg.test(e[j].className)){ e[j].onclick = function(){ var trace = this.parentNode.parentNode; if(collapsedReg.test(trace.className)) trace.className = trace.className.replace("collapsed", "expanded"); else trace.className = trace.className.replace("expanded", "collapsed"); } } } /]]>*/ </script> </body> </html> CDbException.htm (22,212 bytes)

Bug heat	4
Complete LimeSurvey version number (& build)	121115
I will donate to the project if issue is resolved	No
Browser	IE8
Database type & version	SQL Express 2012
Server OS (if known)	Server 2008
Webserver software & version (if known)	IIS 7
PHP Version	5.4.8

User List	There are no users monitoring this issue.

c_schmitz 2012-11-25 13:59 administrator ~22488	Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=10478

c_schmitz 2012-11-25 22:24 administrator ~22498	Fix committed to 2.1 branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=10483

pfpDave 2012-11-26 12:00 reporter ~22535	Tested in Version 2.00+ Build 121121 and this seems to have resolved my issue, many thanks

c_schmitz 2012-11-27 06:11 administrator ~22570	New 2.00+ build released.

LimeSurvey: master 7061c4a9 2012-11-25 12:59:23 c_schmitz Details Diff	Fixed issue 06928: Error when attempting to access 'Participant Panel' as a restricted user and using MSSQL	Affected Issues 06928
	mod - application/models/Participants.php	Diff File
LimeSurvey: 2.1 3669c6fc 2012-11-25 12:59:23 c_schmitz Details Diff	Fixed issue 06928: Error when attempting to access 'Participant Panel' as a restricted user and using MSSQL	Affected Issues 06928
	mod - application/models/Participants.php	Diff File

Date Modified	Username	Field	Change
2012-11-22 11:25	pfpDave	New Issue
2012-11-22 11:25	pfpDave	File Added: CDbException.htm
2012-11-25 13:58	c_schmitz	Assigned To	=> c_schmitz
2012-11-25 13:58	c_schmitz	Status	new => assigned
2012-11-25 13:59	c_schmitz	Status	assigned => resolved
2012-11-25 13:59	c_schmitz	Fixed in Version	=> 2.00+
2012-11-25 13:59	c_schmitz	Resolution	open => fixed
2012-11-25 13:59	c_schmitz	Changeset attached	=> LimeSurvey master 7061c4a9
2012-11-25 13:59	c_schmitz	Note Added: 22488
2012-11-25 22:24	c_schmitz	Changeset attached	=> LimeSurvey 2.1 3669c6fc
2012-11-25 22:24	c_schmitz	Note Added: 22498
2012-11-26 12:00	pfpDave	Note Added: 22535
2012-11-27 06:11	c_schmitz	Note Added: 22570
2012-11-27 06:11	c_schmitz	Status	resolved => closed
2016-12-08 10:39	c_schmitz	Category	Tokens => Survey participants (Tokens)

View Issue Details

Users monitoring this issue

Activities

Related Changesets

Issue History