View Issue Details

This bug affects 1 person(s).
 254
IDProjectCategoryView StatusLast Update
07172Bug reportsSecuritypublic2013-01-15 09:14
ReporterpfpDave Assigned ToDenisChenu  
PrioritynormalSeverityminor 
Status closedResolutionfixed 
Product Version2.00+ 
Fixed in Version2.00+ 
Summary07172: Error Missing argument 1 for accessDenied() when trying to add a user/group to survey permissions when see only own groups=No
Description
  • Switch Global Security Setting 'Group member can only see own group' to No
  • Create a restricted user with Participant Panel and Create Survey Global Permissions
  • Create a survey and assign FULL survey permissions to above restricted user
  • Login as restricted user and go to 'Survey Permissions'
  • Attempt to add a user to the survey
  • Error message appears: Missing argument 1 for accessDenied(), called in C:\limesurvey\application\controllers\admin\surveypermission.php on line 334 and defined

(full error attached)

TagsNo tags attached.
Attached Files
PHP warning.htm (19,102 bytes)   
<!DOCTYPE html PUBLIC
	"-//W3C//DTD XHTML 1.0 Transitional//EN"
	"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<title>PHP warning</title>

<style type="text/css">
/*<![CDATA[*/
html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,font,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td{border:0;outline:0;font-size:100%;vertical-align:baseline;background:transparent;margin:0;padding:0;}
body{line-height:1;}
ol,ul{list-style:none;}
blockquote,q{quotes:none;}
blockquote:before,blockquote:after,q:before,q:after{content:none;}
:focus{outline:0;}
ins{text-decoration:none;}
del{text-decoration:line-through;}
table{border-collapse:collapse;border-spacing:0;}

body {
	font: normal 9pt "Verdana";
	color: #000;
	background: #fff;
}

h1 {
	font: normal 18pt "Verdana";
	color: #f00;
	margin-bottom: .5em;
}

h2 {
	font: normal 14pt "Verdana";
	color: #800000;
	margin-bottom: .5em;
}

h3 {
	font: bold 11pt "Verdana";
}

pre {
	font: normal 11pt Menlo, Consolas, "Lucida Console", Monospace;
}

pre span.error {
	display: block;
	background: #fce3e3;
}

pre span.ln {
	color: #999;
	padding-right: 0.5em;
	border-right: 1px solid #ccc;
}

pre span.error-ln {
	font-weight: bold;
}

.container {
	margin: 1em 4em;
}

.version {
	color: gray;
	font-size: 8pt;
	border-top: 1px solid #aaa;
	padding-top: 1em;
	margin-bottom: 1em;
}

.message {
	color: #000;
	padding: 1em;
	font-size: 11pt;
	background: #f3f3f3;
	-webkit-border-radius: 10px;
	-moz-border-radius: 10px;
	border-radius: 10px;
	margin-bottom: 1em;
	line-height: 160%;
}

.source {
	margin-bottom: 1em;
}

.code pre {
	background-color: #ffe;
	margin: 0.5em 0;
	padding: 0.5em;
	line-height: 125%;
	border: 1px solid #eee;
}

.source .file {
	margin-bottom: 1em;
	font-weight: bold;
}

.traces {
	margin: 2em 0;
}

.trace {
	margin: 0.5em 0;
	padding: 0.5em;
}

.trace.app {
	border: 1px dashed #c00;
}

.trace .number {
	text-align: right;
	width: 2em;
	padding: 0.5em;
}

.trace .content {
	padding: 0.5em;
}

.trace .plus,
.trace .minus {
	display:inline;
	vertical-align:middle;
	text-align:center;
	border:1px solid #000;
	color:#000;
	font-size:10px;
	line-height:10px;
	margin:0;
	padding:0 1px;
	width:10px;
	height:10px;
}

.trace.collapsed .minus,
.trace.expanded .plus,
.trace.collapsed pre {
	display: none;
}

.trace-file {
	cursor: pointer;
	padding: 0.2em;
}

.trace-file:hover {
	background: #f0ffff;
}
/*]]>*/
</style>
</head>

<body>
<div class="container">
	<h1>PHP warning</h1>

	<p class="message">
		Missing argument 1 for accessDenied(), called in C:\limesurvey\application\controllers\admin\surveypermission.php on line 334 and defined	</p>

	<div class="source">
		<p class="file">C:\limesurvey\application\helpers\common_helper.php(6410)</p>
		<div class="code"><pre><span class="ln">6398</span> 
<span class="ln">6399</span>         } // Enf if modified
<span class="ln">6400</span>     } // end while qentry
<span class="ln">6401</span> }
<span class="ln">6402</span> 
<span class="ln">6403</span> /**
<span class="ln">6404</span> * This function is a replacement of accessDenied.php which return appropriate error message which is then displayed.
<span class="ln">6405</span> *
<span class="ln">6406</span> * @params string $action - action for which acces denied error message is to be returned
<span class="ln">6407</span> * @params string sid - survey id
<span class="ln">6408</span> * @return $accesssummary - proper access denied error message
<span class="ln">6409</span> */
<span class="error"><span class="ln error-ln">6410</span> function accessDenied($action,$sid=&#039;&#039;)
</span><span class="ln">6411</span> {
<span class="ln">6412</span>     $clang = Yii::app()-&gt;lang;
<span class="ln">6413</span>     if (Yii::app()-&gt;session[&#039;loginID&#039;])
<span class="ln">6414</span>     {
<span class="ln">6415</span>         $ugid = Yii::app()-&gt;getConfig(&#039;ugid&#039;);
<span class="ln">6416</span>         $accesssummary = &quot;&lt;p&gt;&lt;strong&gt;&quot;.$clang-&gt;gT(&quot;Access denied!&quot;).&quot;&lt;/strong&gt;&lt;br /&gt;\n&quot;;
<span class="ln">6417</span>         $scriptname = Yii::app()-&gt;getConfig(&#039;scriptname&#039;);
<span class="ln">6418</span>         //$action=returnGlobal(&#039;action&#039;);
<span class="ln">6419</span>         if  (  $action == &quot;dumpdb&quot;  )
<span class="ln">6420</span>         {
<span class="ln">6421</span>             $accesssummary .= &quot;&lt;p&gt;&quot;.$clang-&gt;gT(&quot;You are not allowed dump the database!&quot;).&quot;&lt;br /&gt;&quot;;
<span class="ln">6422</span>             $accesssummary .= &quot;&lt;a href=&#039;$scriptname&#039;&gt;&quot;.$clang-&gt;gT(&quot;Continue&quot;).&quot;&lt;/a&gt;&lt;br /&gt;&amp;nbsp;\n&quot;;
</pre></div>	</div>

	<div class="traces">
		<h2>Stack Trace</h2>
				<table style="width:100%;">
						<tr class="trace app expanded">
			<td class="number">
				#0			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\application\controllers\admin\surveypermission.php(334): <strong>accessDenied</strong>()				</div>

				<div class="code"><pre><span class="ln">329</span>                     $addsummary .= &quot;&lt;br/&gt;&lt;input type=\&quot;submit\&quot; onclick=\&quot;window.open(&#039;&quot;.$this-&gt;getController()-&gt;createUrl(&#039;admin/surveypermission/sa/view/surveyid/&#039;.$surveyid).&quot;&#039;, &#039;_top&#039;)\&quot; value=\&quot;&quot;.$clang-&gt;gT(&quot;Continue&quot;).&quot;\&quot;/&gt;\n&quot;;
<span class="ln">330</span>                 }
<span class="ln">331</span>             }
<span class="ln">332</span>             else
<span class="ln">333</span>             {
<span class="error"><span class="ln error-ln">334</span>                 accessDenied();
</span><span class="ln">335</span>             }
<span class="ln">336</span> 
<span class="ln">337</span>             $addsummary .= &quot;&lt;/div&gt;\n&quot;;
<span class="ln">338</span> 
<span class="ln">339</span>             $aViewUrls[&#039;output&#039;] = $addsummary;
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#1			</td>
			<td class="content">
				<div class="trace-file">
										&nbsp;unknown(0): <strong>surveypermission</strong>-><strong>adduser</strong>(&quot;328177&quot;)				</div>

							</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#2			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\actions\CAction.php(107): <strong>ReflectionMethod</strong>-><strong>invokeArgs</strong>(surveypermission, array(&quot;328177&quot;))				</div>

				<div class="code"><pre><span class="ln">102</span>             else if($param-&gt;isDefaultValueAvailable())
<span class="ln">103</span>                 $ps[]=$param-&gt;getDefaultValue();
<span class="ln">104</span>             else
<span class="ln">105</span>                 return false;
<span class="ln">106</span>         }
<span class="error"><span class="ln error-ln">107</span>         $method-&gt;invokeArgs($object,$ps);
</span><span class="ln">108</span>         return true;
<span class="ln">109</span>     }
<span class="ln">110</span> }
</pre></div>			</td>
		</tr>
						<tr class="trace app expanded">
			<td class="number">
				#3			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\application\core\Survey_Common_Action.php(100): <strong>CAction</strong>-><strong>runWithParamsInternal</strong>(surveypermission, ReflectionMethod, array(&quot;surveyid&quot; =&gt; &quot;328177&quot;, &quot;sa&quot; =&gt; &quot;adduser&quot;, &quot;iSurveyId&quot; =&gt; &quot;328177&quot;, &quot;iSurveyID&quot; =&gt; &quot;328177&quot;))				</div>

				<div class="code"><pre><span class="ln">095</span>             $oMethod = new ReflectionMethod($this, $sDefault);
<span class="ln">096</span>         }
<span class="ln">097</span> 
<span class="ln">098</span>         // We&#039;re all good to go, let&#039;s execute it
<span class="ln">099</span>         // runWithParamsInternal would automatically get the parameters of the method and populate them as required with the params
<span class="error"><span class="ln error-ln">100</span>         return parent::runWithParamsInternal($this, $oMethod, $params);
</span><span class="ln">101</span>     }
<span class="ln">102</span> 
<span class="ln">103</span>     /**
<span class="ln">104</span>     * Some functions have different parameters, which are just an alias of the
<span class="ln">105</span>     * usual parameters we&#039;re getting in the url. This function just populates
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#4			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\CController.php(309): <strong>Survey_Common_Action</strong>-><strong>runWithParams</strong>(array(&quot;surveyid&quot; =&gt; &quot;328177&quot;, &quot;sa&quot; =&gt; &quot;adduser&quot;))				</div>

				<div class="code"><pre><span class="ln">304</span>     {
<span class="ln">305</span>         $priorAction=$this-&gt;_action;
<span class="ln">306</span>         $this-&gt;_action=$action;
<span class="ln">307</span>         if($this-&gt;beforeAction($action))
<span class="ln">308</span>         {
<span class="error"><span class="ln error-ln">309</span>             if($action-&gt;runWithParams($this-&gt;getActionParams())===false)
</span><span class="ln">310</span>                 $this-&gt;invalidActionParams($action);
<span class="ln">311</span>             else
<span class="ln">312</span>                 $this-&gt;afterAction($action);
<span class="ln">313</span>         }
<span class="ln">314</span>         $this-&gt;_action=$priorAction;
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#5			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\CController.php(287): <strong>CController</strong>-><strong>runAction</strong>(surveypermission)				</div>

				<div class="code"><pre><span class="ln">282</span>      * @see runAction
<span class="ln">283</span>      */
<span class="ln">284</span>     public function runActionWithFilters($action,$filters)
<span class="ln">285</span>     {
<span class="ln">286</span>         if(empty($filters))
<span class="error"><span class="ln error-ln">287</span>             $this-&gt;runAction($action);
</span><span class="ln">288</span>         else
<span class="ln">289</span>         {
<span class="ln">290</span>             $priorAction=$this-&gt;_action;
<span class="ln">291</span>             $this-&gt;_action=$action;
<span class="ln">292</span>             CFilterChain::create($this,$action,$filters)-&gt;run();
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#6			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\CController.php(266): <strong>CController</strong>-><strong>runActionWithFilters</strong>(surveypermission, array())				</div>

				<div class="code"><pre><span class="ln">261</span>         {
<span class="ln">262</span>             if(($parent=$this-&gt;getModule())===null)
<span class="ln">263</span>                 $parent=Yii::app();
<span class="ln">264</span>             if($parent-&gt;beforeControllerAction($this,$action))
<span class="ln">265</span>             {
<span class="error"><span class="ln error-ln">266</span>                 $this-&gt;runActionWithFilters($action,$this-&gt;filters());
</span><span class="ln">267</span>                 $parent-&gt;afterControllerAction($this,$action);
<span class="ln">268</span>             }
<span class="ln">269</span>         }
<span class="ln">270</span>         else
<span class="ln">271</span>             $this-&gt;missingAction($actionID);
</pre></div>			</td>
		</tr>
						<tr class="trace app expanded">
			<td class="number">
				#7			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\application\controllers\AdminController.php(169): <strong>CController</strong>-><strong>run</strong>(&quot;surveypermission&quot;)				</div>

				<div class="code"><pre><span class="ln">164</span>                     $this-&gt;redirect($this-&gt;createUrl(&#039;/admin/authentication/sa/login&#039;));
<span class="ln">165</span>                 }
<span class="ln">166</span>                 
<span class="ln">167</span>             }
<span class="ln">168</span> 
<span class="error"><span class="ln error-ln">169</span>             return parent::run($action);
</span><span class="ln">170</span>     }
<span class="ln">171</span> 
<span class="ln">172</span>     /**
<span class="ln">173</span>     * Routes all the actions to their respective places
<span class="ln">174</span>     *
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#8			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\CWebApplication.php(276): <strong>AdminController</strong>-><strong>run</strong>(&quot;surveypermission&quot;)				</div>

				<div class="code"><pre><span class="ln">271</span>         {
<span class="ln">272</span>             list($controller,$actionID)=$ca;
<span class="ln">273</span>             $oldController=$this-&gt;_controller;
<span class="ln">274</span>             $this-&gt;_controller=$controller;
<span class="ln">275</span>             $controller-&gt;init();
<span class="error"><span class="ln error-ln">276</span>             $controller-&gt;run($actionID);
</span><span class="ln">277</span>             $this-&gt;_controller=$oldController;
<span class="ln">278</span>         }
<span class="ln">279</span>         else
<span class="ln">280</span>             throw new CHttpException(404,Yii::t(&#039;yii&#039;,&#039;Unable to resolve the request &quot;{route}&quot;.&#039;,
<span class="ln">281</span>                 array(&#039;{route}&#039;=&gt;$route===&#039;&#039;?$this-&gt;defaultController:$route)));
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#9			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\web\CWebApplication.php(135): <strong>CWebApplication</strong>-><strong>runController</strong>(&quot;admin/surveypermission/sa/adduser&quot;)				</div>

				<div class="code"><pre><span class="ln">130</span>             foreach(array_splice($this-&gt;catchAllRequest,1) as $name=&gt;$value)
<span class="ln">131</span>                 $_GET[$name]=$value;
<span class="ln">132</span>         }
<span class="ln">133</span>         else
<span class="ln">134</span>             $route=$this-&gt;getUrlManager()-&gt;parseUrl($this-&gt;getRequest());
<span class="error"><span class="ln error-ln">135</span>         $this-&gt;runController($route);
</span><span class="ln">136</span>     }
<span class="ln">137</span> 
<span class="ln">138</span>     /**
<span class="ln">139</span>      * Registers the core application components.
<span class="ln">140</span>      * This method overrides the parent implementation by registering additional core components.
</pre></div>			</td>
		</tr>
						<tr class="trace core collapsed">
			<td class="number">
				#10			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\framework\base\CApplication.php(162): <strong>CWebApplication</strong>-><strong>processRequest</strong>()				</div>

				<div class="code"><pre><span class="ln">157</span>      */
<span class="ln">158</span>     public function run()
<span class="ln">159</span>     {
<span class="ln">160</span>         if($this-&gt;hasEventHandler(&#039;onBeginRequest&#039;))
<span class="ln">161</span>             $this-&gt;onBeginRequest(new CEvent($this));
<span class="error"><span class="ln error-ln">162</span>         $this-&gt;processRequest();
</span><span class="ln">163</span>         if($this-&gt;hasEventHandler(&#039;onEndRequest&#039;))
<span class="ln">164</span>             $this-&gt;onEndRequest(new CEvent($this));
<span class="ln">165</span>     }
<span class="ln">166</span> 
<span class="ln">167</span>     /**
</pre></div>			</td>
		</tr>
						<tr class="trace app collapsed">
			<td class="number">
				#11			</td>
			<td class="content">
				<div class="trace-file">
											<div class="plus">+</div>
						<div class="minus">–</div>
										&nbsp;C:\limesurvey\index.php(178): <strong>CApplication</strong>-><strong>run</strong>()				</div>

				<div class="code"><pre><span class="ln">173</span>  *
<span class="ln">174</span>  */
<span class="ln">175</span> require_once BASEPATH . &#039;yii&#039; . EXT;
<span class="ln">176</span> require_once APPPATH . &#039;core/LSYii_Application&#039; . EXT;
<span class="ln">177</span> 
<span class="error"><span class="ln error-ln">178</span> Yii::createApplication(&#039;LSYii_Application&#039;, APPPATH . &#039;config/config&#039; . EXT)-&gt;run();
</span><span class="ln">179</span> 
<span class="ln">180</span> /* End of file index.php */
<span class="ln">181</span> /* Location: ./index.php */
</pre></div>			</td>
		</tr>
				</table>
	</div>

	<div class="version">
		2013-01-10 14:30:53 Microsoft-IIS/7.5 <a href="http://www.yiiframework.com/">Yii Framework</a>/1.1.10	</div>
</div>

<script type="text/javascript">
/*<![CDATA[*/
var traceReg = new RegExp("(^|\\s)trace-file(\\s|$)");
var collapsedReg = new RegExp("(^|\\s)collapsed(\\s|$)");

var e = document.getElementsByTagName("div");
for(var j=0,len=e.length;j<len;j++){
	if(traceReg.test(e[j].className)){
		e[j].onclick = function(){
			var trace = this.parentNode.parentNode;
			if(collapsedReg.test(trace.className))
				trace.className = trace.className.replace("collapsed", "expanded");
			else
				trace.className = trace.className.replace("expanded", "collapsed");
		}
	}
}
/*]]>*/
</script>

</body>
</html>
PHP warning.htm (19,102 bytes)   
Bug heat254
Complete LimeSurvey version number (& build)130108
I will donate to the project if issue is resolvedNo
BrowserIE8
Database type & versionSQL Express 2012
Server OS (if known)Server 2008
Webserver software & version (if known)IIS 7
PHP Version5.4.8

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2013-01-13 12:30

developer   ~23626

Already for 2.1, take it for 2.0

c_schmitz

c_schmitz

2013-01-15 09:14

administrator   ~23657

2.00+ Build 130115 released

Issue History

Date Modified Username Field Change
2013-01-10 15:33 pfpDave New Issue
2013-01-10 15:33 pfpDave File Added: PHP warning.htm
2013-01-13 12:30 DenisChenu Note Added: 23626
2013-01-13 12:30 DenisChenu Assigned To => DenisChenu
2013-01-13 12:30 DenisChenu Status new => assigned
2013-01-14 14:59 DenisChenu Status assigned => resolved
2013-01-14 14:59 DenisChenu Fixed in Version => 2.00+
2013-01-14 14:59 DenisChenu Resolution open => fixed
2013-01-15 09:14 c_schmitz Note Added: 23657
2013-01-15 09:14 c_schmitz Status resolved => closed