Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http erros when uploading from frontend with user thats not in the admin group #12

Open
FinBoWa opened this issue Apr 28, 2011 · 2 comments

Comments

@FinBoWa
Copy link

FinBoWa commented Apr 28, 2011

Seems that script cant send the refresh reqeust trought from ajax on "protected" pages unless the user belongs to admin security level. Non logged in user can submit a file nicely.

Havent had the chage to investigate further but presume that its missing some necessary request params on the refresh call.

Cheers,
Olli

@FinBoWa
Copy link
Author

FinBoWa commented Apr 29, 2011

Seems that I neglegted to notice the security section @ http://doc.silverstripe.org/old/uploadify. What states that the session_use_only_cookies on isnt a good thing. That was set by default on the development server.

@FinBoWa FinBoWa closed this as completed Apr 29, 2011
@FinBoWa FinBoWa reopened this May 4, 2011
@FinBoWa
Copy link
Author

FinBoWa commented May 4, 2011

Actually the issue appears even if the session.use_only_cookies. No change in behaviour what so ever. Server still tries to redirect the request to the upload() function. On a protected page only admin user can get pass the auhtentication and submit an image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant