Admin User Permissions Keeping Clearing Out or Not Saving Correctly (OC 3.0.3.3)

I've just set up a clean install of OC 3.0.3.3.

I'm having a strange issue with admin user group permissions.

The issue is that once I've installed an extension (seemingly any extension), and I visit Admin CP > System > Users > User Groups; edit the "Administrator" group, and select all in both the Access Permission and Modify Permission sections, and click the save button, it saves successfully and returns me to the last page that lists the user groups.

However, when I then move elsewhere (anywhere) within the Admin CP and try to make any other updates I receive the error message "Warning: You do not have permission to modify settings!" / "Warning: You do not have permission to modify modifications!" (etc) when I try to save changes.

This affects everything within the Admin CP after this point. I cannot change anything... Themes, refresh mod cache, amend permissions - anything, it just seems to mess up the user group permissions completely when I try to edit them.

Being a fresh install, I have only added a couple of extensions, however this issue seems to occur irrespective of those as I have tried resetting the permissions within the user_groups table in phpMyAdmin to the default that come within the sql file in OC3.0.3.3's install folder... Doing this restores access to the previous set of permissions (the default ones), however if I then go to update user group permissions again, the issue recurs each time... Locked out of every setting, need to reset in phpMyAdmin etc.

Any idea what could be causing this issue? It's not something I've encountered before.

Just reinstall fresh or disable each extension one by one. If you have messed with the DB dropping and re-adding data, probably best to just reinstall.

Sounds like the permissions might have got messed up in the database. There are other posts elsewhere in this forum about how to fix that so I suggest you search for those.

As requested; I have the below mods installed; however none (besides Journal) are active.

• Journal Theme

• CountryZone Manager - Country

• CountryZone Manager - Zone

• Opencart SEO Pack PRO

• Paypal Standart

I've found that even when having restored the default user group permissions directly into the db table as mentioned in my original post above, per the other topics on the site (that I had already searched for...) if I then re-visit user group permissions, change nothing it saves successfully, the first time... However, if I then visit it again, and try to re-save (having changed none of the permissions on either occasion) it fires the "Warning: You do not have permission to modify user groups!" error and low and behold the permissions are all messed up again.

I now have a fresh install of 3.0.3.6

I have installed nothing, changed nothing.

However the exact same issue is happening.

I amend user group permissions, click save and the success message is shown. Then I go to try to amend anything thereafter (including returning to amend user group permissions for a second time) but I'm then blocked out of everything "Warning: You do not have permission to modify user groups!" (and all the other variants of this error message)

This is a totally clean install.

I have changed nothing, installed nothing. I literally installed 3.0.3.6 and the first thing I did was make a b-line for the user group permissions.

Nothing in any of the error logs.

I've had a 1.5.6.4 store up on the same server running fine for years, never seen anything like this.

Does anyone have any ideas what's not working here as clearly something is amiss?

Why has this been moved to themes? Its literally got zero to do with themes... This place ffs.

Permissions seemed to work fine for me in a clean install of 3.0.3.6. Are your running any sort of Web Application Firewall on your server? Are your doing any sort of caching or setting future expires headers?

Have you compared the the permission entry in the database before and after changing a single permission, to see what the difference is?

SBLNet wrote: ↑

Sat Dec 12, 2020 7:31 am

Why has this been moved to themes? Its literally got zero to do with themes...
---
I've just set up a clean install of OC 3.0.3.3.
As requested; I have the below mods installed; however none (besides Journal) are active.

Well, you either still don't know, that a Journal Install has a fundamental impact on the way,
how OC is doing things, or then, you tried to hide that Fact in the beginning, aware of, that
this Theme Extension, sizewise larger than the OC Install itself, might not be treated favourably
around the free 'OpenSource' Forum Sections. But as soon as a 'commercial' Extension is part
of a topic, the Posting belongs into the commercial Section of this Forum, by Nature of 'commercial'
things.

You're long enough around here, to have an Idea on how this place works. Despite of the Fact,
that you obviously never cared much about assisting others around here in return, according to
the postings you made. So better calm down and talk TECH, instead of demanding free assistance,
by repeating the same in multiple places. It will be seen and replied to, if others feel, that it's worth
it, if one tries to assist, by at least telling the whole story about it, from the start on already ...

Your latest 'post-copy' will be removed, Forum Rules do not allow double postings of the same matter.
Just to have you informed. And please, no offensive comments, it would not be tolerated.
Ernie

Oh Ernie, toys back in the pram please, I’m not that bad

The tone here is exactly the point I was trying to make (albeit incredibly poorly) in my frustrated, short post above... There are times that the community forums here are rarely the place for actual community support (not to start with anyway) there’s way more finger pointing and mouth-frothing accusations of “journal did it”!

Furthermore, by the time I’d managed to get further info to add from trying things out myself (my last longer post) the topic had already moved to the abyss, with no relation to the actual topic. Oh, and the word journal made bold...

To address your point, I’ve never really found any answers to my OC issues here, but it’s always been where I’ve tried to start that quest which I think makes sense.

I have purchased a great many things from marketplace partners over the years and I’d never demand anything for free that shouldn’t be! I’ve never actively trawled this place looking for issues to help resolve as I’ve rarely felt I’d be of much use frankly, otherwise I would. I’m sure there are many that do similarly. Given my time on the forums here, I don’t think my post rate of approx 1.75 per year is all that demanding... Generally baffled yes, but demanding no. I of course appreciate your feedback though in your trademarked way.

Looping back round the subject at hand...


The first thing I did following my original post was to remove Journal in its entirety from 3.0.3.3, reset the db per the various posts/threads already here.

Still, each time the user group permissions just seem to be messed up and lock the admin user out of everything within the admin control panel.

Next, I installed the latest version of OC 3.0.3.6, along with a new db too, having upgraded my PHP version to suit to 7.3.

From that clean install, I installed nothing additional, modded nothing, changed nothing. Still the same thing happens when amending user group permissions.

Given that makes this an issue on a totally clean install, of the latest OC version, different to where I started, you don’t feel that required an updated post in the correct place, referencing the actual issue? Fine, if you feel that way of course, but I at least think this thread sits better there (OC3 general support) - again - do you not?

Thanks as ever (demanding post number 8, in 4 years )

ADD Creative wrote: ↑

Sat Dec 12, 2020 8:24 am

Permissions seemed to work fine for me in a clean install of 3.0.3.6. Are your running any sort of Web Application Firewall on your server? Are your doing any sort of caching or setting future expires headers?

Have you compared the the permission entry in the database before and after changing a single permission, to see what the difference is?

Thank you very much for this, I haven’t thought of or tired looking at these yet. I will give it a try and revert back here. Thanks again *fingers crossed*

Another thing to check is your PHP settings. There are about 450+ fields posted for saving the permissions. What you describe could happen if the POST data was truncated.

Check max_input_vars and post_max_size are not too low.

There are times that the community forums here are rarely the place for actual community support

Well, OpenCart is sure no Community Project, it's only purpose is, to generate income, in one or the other way. It's
a plain wonder, that so many have contributed their free knowledge, during all those Years, since OC exists.
But like anywhere else, as more MATURE something gets, the less FREE will be part of it. Especially under the Aspect,
that most of the once 'paid' Contributions are available on Darknet Sites today. Just take Journal as a Number One
sample, I bet, that the majority of new J-Users today consists out of 'illegally re-distributed' Code Users. And since they
have no 'legal' way, to eventually get support, they all come here too, expecting someone to assist them for 'free' .

All that has severe consequences, on the motivation of those, frequently supporting others here. Why should they
bother about Crooks, trying to generate income, by use of stolen Code ?! I've seen a lot of fine people, come, and go
again after a while, and most likely, to avoid a depression. And the closer we get into the AGE of Egomania, the worse
it will get. Take yourselfs as a 'free' sample, on how the vast majority acts, they only come here, to seek some help, but
none of them would ever think of trying to give something back to that 'so-called' Community of friends.

So, better just tax OC from the plain Business-Point-of-View, be greatful, if one finds answers and solutions, but better
don't expect others, to be of free help. Or then only, if it's related to 'legally freely available' OC Code and Wisdom. It's
the only way, for a Software, and a Forum, to survive, in longer terms.
Ernie

ADD Creative wrote: ↑

Sun Dec 13, 2020 12:29 am

Another thing to check is your PHP settings. There are about 450+ fields posted for saving the permissions. What you describe could happen if the POST data was truncated.

Check max_input_vars and post_max_size are not too low.

Hmm, strange. I've checked those two settings and they seemed fine, however I did increase these just to try. Attached (purely for info) is the content from my oc_user_group table's permission column, before and after making a change. The content appears different, but not truncated mid flow. Yet, as before. Admin user locked out of everything.

SBLNet wrote: ↑

Sun Dec 13, 2020 5:02 am

ADD Creative wrote: ↑

Sun Dec 13, 2020 12:29 am

Another thing to check is your PHP settings. There are about 450+ fields posted for saving the permissions. What you describe could happen if the POST data was truncated.

Check max_input_vars and post_max_size are not too low.

Hmm, strange. I've checked those two settings and they seemed fine, however I did increase these just to try. Attached (purely for info) is the content from my oc_user_group table's permission column, before and after making a change. The content appears different, but not truncated mid flow. Yet, as before. Admin user locked out of everything.

Your permissions are truncated. Looks like some permission are missing in the 3.0.3.6 SQL file. If I select all and save, I get the same as your after. But yours stops at "localisation\/country"]} whereas mine continues on.

After much tweaking, re-setting and re-checking, I discovered that there was another php.ini / htaccess fileset present in the parent directory 'above' the directory in which the site is installed. I had earlier adjusted the files located directly within this site's directory based on your suggestion, however the other php.ini / htaccess files (in the parent directory) had a lower limit specified and were overriding those I'd updated, and so continuing to cause the issue I was seeing.

I have now increased the values of the fields you mentioned (max_input_vars and post_max_size) within the other php.ini / htaccess files (those in the parent directory) to match those within the site directory itself. The issue with the admin user permissions now seems to be resolved.

Thank you so much ADD Creative, I really do appreciate your help with this over the last couple of days.


https://www.add-creative.co.uk