Access rights have changed

Since a couple of weeks I get a 'no access' with my admin account (which I have been using forever). There have been no updates, upgrades or changes whatsoever. Any idea what has gone wrong and how to verify and solve?

Thanks,
Stefaan

Dutch message when I try to update an order.
" Waarschuwing: U heeft geen rechten deze instellingen te wijzigen!"

sthaesen wrote: ↑

Wed May 01, 2024 11:31 pm

Since a couple of weeks I get a 'no access' with my admin account (which I have been using forever). There have been no updates, upgrades or changes whatsoever. Any idea what has gone wrong and how to verify and solve?

Thanks,
Stefaan

Dutch message when I try to update an order.
" Waarschuwing: U heeft geen rechten deze instellingen te wijzigen!"

OC version. More information from the above is needed, as well.

Version 3.0.3.8

Not much to add ... one day it was working fine, next day I do not have 'access' anymore for updating orders ... other admin access is working fine.

sthaesen wrote: ↑

Thu May 02, 2024 4:28 am

Version 3.0.3.8

Not much to add ... one day it was working fine, next day I do not have 'access' anymore for updating orders ... other admin access is working fine.

If the permissions have changed from your OC Admin > Systems > Users > User Permissions page, then there's something to add. Did you installed any extensions recently? When check marking the admin orders in the permissions page, are the permissions responding when re-visiting the admin orders page? More information is needed here.

sthaesen wrote: ↑

Wed May 01, 2024 11:31 pm

Since a couple of weeks I get a 'no access' with my admin account (which I have been using forever). There have been no updates, upgrades or changes whatsoever. Any idea what has gone wrong and how to verify and solve?

If you're sure you're not mistyping the password it's possible you've been hacked?

Hello guys,

There have been no changes, the password is accepted, but does not give access to update the orders. All other admin rights seem ok. The last update order was on 10/03, as from 12/03 i cannot update orders anymore.

I'll try creating another admin user ...

tnx, Stefaan

Created a 'new' admin account and this is giving the same behavior. Not able to update orders?

Sounds like you need to post in Commercial Support and pay someone to take a look.

sthaesen wrote: ↑

Sun May 05, 2024 5:11 am

Created a 'new' admin account and this is giving the same behavior. Not able to update orders?

As per the forum rules, please post your recent server error logs.

Hi All,

Still suffering here ... I checked the admin settings and all options are selected (tried unselect/select).
Can someone give me a hint on where to look ?

Thanks,
Stefaan

Whilst you have attached an image of the permissions, not with the relevant bit.
As Paul said, you could have been hacked? Maybe you DB was corrupted? Maybe you deleted it by accident? Maybe you did not notice it before and you added an extension. Maybe something in your admin menu? We can only go off the information we are provided with.

Hi Mona,

There isn't much to work with ... I can do all other 'admin' things, except for 'updating order history', more specific when using the section 'add order history'.
After looking into the database and table I'm sure the issue is with the content of the permissions-field in the oc_user_group table. So the question is how can I add this access again. I would need to know which entry to add, because through the admin interface everything is 'selected' and I already tried deselect/select and also creating a new admin account. I will dive al little deeper in the php-code in the coming days. Unfotunaly I now have an additional issue: I cannot make a backup anymore (http error 500).

Let me know which bit is relevant and I will add it.

Stefaan

Add order History
Check your Events table admin => extensions => events User groups table look here
viewtopic.php?t=213107#p761328

Backup
Do not use the built in Opencart for backups.
Use CPanel (or your alternative) & phpMyAdmin (or your alternative)
Ask your host for assistance. Unless you use cheap hosting they will have backups.

Also to note
If this is a “backdoor” or malicious code it will happen again.
This is a different issue and you can use the same version (or upgrade if you are not on php8), but you might want to consider a fresh install for numerous reasons, even just to check one against the other (user group and events). viewtopic.php?t=232146

Hi Mona, thanks for taking the time to answer me

For 'Add Order History'
I checked the events and they are all active. I did try disabling and enabling 'activity_order_add', but no difference afterwards. And as I mentioned, I can add orders and so can visitors. It is only the 'update history' that is causing me issues.

Backup
Used to work fine, but I'm also using other backup methods.

I wouldn't mind doing a fresh install, but it seems the tables have been modified between 3.0.3.8 and 4.0.3.2 Is there some kind of update script available to modify the tables ?

The Add History uses the api/order/history which can be found in the catalog/controller/api/order.php file, in function history. So this is where you should start your examinations. E.g. what is its exact json response? If you don't know how to use the browser's code inspector to get the json details, than you should find a professional developer to look into it.

BTW.: There no such version like 4.0.3.2 of OpenCart!

sthaesen wrote: ↑

Mon Aug 19, 2024 5:00 pm

I wouldn't mind doing a fresh install, but it seems the tables have been modified between 3.0.3.8 and 4.0.3.2 Is there some kind of update script available to modify the tables ?

As JNeuhoff has said. There is a difference between 3.0.3.8 and 4.0.2.3
Each version is different. OC3 to OC4 is very different
OC2 to OC 3 is very different

1. OC4 is not really ready for production sites and since you are not familiar with OC definitely do not upgrade to OC4
Use OC3 what we refer to as 'maintenance branch ' as it is OC3 for php8
https://github.com/opencart/opencart/tree/3.0.x.x - aka JNeuhoff
https://github.com/condor2/Opencart_30xx - aka xxvirusxx
There are also two version that are similar to the above under 3.0.3.9 and 3.0.4.0 https://www.opencart.com/index.php?rout ... ad/history

2. What I told you to do was set up a completely new site in a completely different place using the SAME version of OC as installed on your current site. Then you can side by side see what, if anything, is missing.

sthaesen wrote: ↑

Mon Aug 19, 2024 5:00 pm

Backup
Used to work fine, but I'm also using other backup methods.

Do not use the built in back up. It doesn't work fine. Here may be your problem.
Files and db are connected so it is quite possible that you have used a files back up from 5 months ago and a db backup from last week.

sthaesen wrote: ↑

Mon Aug 19, 2024 5:00 pm

Is there some kind of update script available to modify the tables ?

No and if you do not follow instructions you will get into a big mess.
JNeuhoff is correct, it might be time for you to get professional help.

We still do not understand what is wrong.
1. I did not tell you to disable, I said to compare the two. IT MUST BE ENABLED.
2. Permissions is not the same as not being able to add order_history, which is not the same as update history.


Pressing lots of buttons does not help.
For example, IF disabling something is the correct thing to do but when you disable it it still doesn't work. That does not NECESSARILY mean that it was the wrong thing to do, it just means you had to fix something else also. It also does not mean that it was correct. Think of it like a combination lock, everything has to be correct and in the right order to work. Extensions and theme add maybe change the order, add more numbers, remove numbers. Your logs will tell you "5 numbers required and not 4" - then you know if OC has 4 numbers an extension has added a 5th.

No one want s you to get into a bigger mess.
Think about professional advice.
Set up a completely new site in a completely different place and follow the instructions already provided.