? Success

User tests: Successful: Unsuccessful:

avatar matrikular
matrikular
28 Oct 2016

Summary of Changes

This PR implements a check and notification for an invalid or missing access file that is accessed in both core and 3rd party extensions via the JHelperContent::getActions method.

In the current implementation, depending on the error reporting level, an invalid argument warning would be either shown to the user or written to the php error log file.

Testing Instructions

  • Set the error reporting level of your (test) installation to maximum (Global Configuration - Server Settings - Error Reporting)
  • Head over to the file system and rename an access.xml for e.g. administrator/components/com_banners to access.xml_
  • Open the banners component in the backend. You should see something similar to this:
    pr_banner_before_patch

In a normal running website, the error reporting level would be set to "System Default" (reporting). The only indication for an invalid or missing access file, is just a few missing toolbar buttons.

  • Apply the patch. You should see an error message like the one in the screenshot below.
    pr_banner_after_patch
avatar matrikular matrikular - open - 28 Oct 2016
avatar matrikular matrikular - change - 28 Oct 2016
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 28 Oct 2016
Labels Added: ? ?
avatar matrikular matrikular - edited - 28 Oct 2016
avatar joomla-cms-bot joomla-cms-bot - change - 28 Oct 2016
Category Administration Language & Strings Libraries
avatar joomla-cms-bot joomla-cms-bot - change - 28 Oct 2016
The description was changed
Labels Removed: ?
avatar mbabker
mbabker - comment - 28 Oct 2016

I wouldn't put the entire file path in the message. Try this: "The %s component's ACL configuration file is either missing or improperly structured.", merge in the component's name. If this message ever displays on the frontend as is that would be a full path disclosure.

avatar matrikular matrikular - reference | 009b72c - 28 Oct 16
avatar matrikular matrikular - reference | a5c08cd - 28 Oct 16
avatar brianteeman
brianteeman - comment - 28 Oct 2016

ignore that comment. I see now that was to fix an error in the PR and you are not removing a string

avatar coolcat-creations coolcat-creations - test_item - 28 Oct 2016 - Tested successfully
avatar coolcat-creations
coolcat-creations - comment - 28 Oct 2016

I have tested this item successfully on dae023e

Works like described, thank you!


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12608.

avatar ufuk-avcu ufuk-avcu - test_item - 28 Oct 2016 - Tested successfully
avatar ufuk-avcu
ufuk-avcu - comment - 28 Oct 2016

I have tested this item successfully on dae023e


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12608.

avatar gunthelm2000
gunthelm2000 - comment - 28 Oct 2016

I have tested this item successfully on dae023e


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12608.

avatar gunthelm2000 gunthelm2000 - test_item - 28 Oct 2016 - Tested successfully
avatar gunthelm2000
gunthelm2000 - comment - 28 Oct 2016

I have also tested this item successfully!


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12608.

avatar zero-24 zero-24 - change - 28 Oct 2016
Status Pending Ready to Commit
avatar zero-24
zero-24 - comment - 28 Oct 2016

RTC


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/12608.

avatar joomla-cms-bot joomla-cms-bot - change - 28 Oct 2016
Labels Added: ?
avatar zero-24 zero-24 - close - 28 Oct 2016
avatar rdeutz rdeutz - change - 28 Oct 2016
Status Ready to Commit Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2016-10-28 18:28:39
Closed_By rdeutz
avatar rdeutz rdeutz - close - 28 Oct 2016
avatar rdeutz rdeutz - merge - 28 Oct 2016
avatar zero-24 zero-24 - change - 29 Oct 2016
Labels Removed: ?

Add a Comment

Login with GitHub to post a comment