No Code Attached Yet
avatar paydelott
paydelott
27 Aug 2021

Steps to reproduce the issue

From Joomla 4.02 dashboard, upload media content.
Select appropriate image folder.
Browse to source image on local PC. Select one or more images.
Watch progress indicator on upload.
See error message: "You don't have permission to access this. Please contact a website administrator if this is incorrect."

Expected result

Small image files should upload without issues.

Actual result

Images cannot be uploaded.

System information (as much as possible)

Note: Upload also fails with JCE image manager.
Files can be upload to /images directory via file manager in cpanel.
File & folder permissions all set to 655.

Additional comments

avatar paydelott paydelott - open - 27 Aug 2021
avatar paydelott paydelott - change - 27 Aug 2021
Labels Removed: ?
avatar joomla-cms-bot joomla-cms-bot - change - 27 Aug 2021
Labels Added: No Code Attached Yet
avatar joomla-cms-bot joomla-cms-bot - labeled - 27 Aug 2021
avatar dgrammatiko
dgrammatiko - comment - 28 Aug 2021

Note: Upload also fails with JCE image manager.

Uninstall JCE and report back if the problem persists

avatar paydelott
paydelott - comment - 28 Aug 2021

I disabled JCE with no change in behavior. The system also constantly
requires me to login after every action. I manually upgraded to 4.02 with
no change in behavior.

Thanks for the suggestion.
Paul

On Sat, Aug 28, 2021 at 6:22 AM Dimitris Grammatikogiannis <
@.***> wrote:

Note: Upload also fails with JCE image manager.

Uninstall JCE and report back if the problem persists


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEELL3PY2IMI43UPON3T7DBINANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

well it uploads fail in JCE and uploads fail in Joomla - then its probably a hosting issue and not a Joomla issue.

Fix permissions and ownership on files and folders and try again, also remove all .htaccess files and try again.

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

Please send a screenshot of this error page:

See error message: "You don't have permission to access this. Please contact a website administrator if this is incorrect."

avatar paydelott
paydelott - comment - 28 Aug 2021

I believe I uploaded a screenshot initially.

On Saturday, August 28, 2021, Phil E. Taylor @.***>
wrote:

Please send a screenshot of this error page:

See error message: "You don't have permission to access this. Please
contact a website administrator if this is incorrect."


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZECNQMX4QXI7XAPU4HTT7DZVNANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar brianteeman
brianteeman - comment - 28 Aug 2021

If you had done then you wouldn't have been asked to do it.

avatar paydelott
paydelott - comment - 28 Aug 2021

The htaccess file is what ships with Joomla. The php version is 7.4.22. New site. Only Akeeba admin tools installed to verify file permissions.
screen

avatar dgrammatiko
dgrammatiko - comment - 28 Aug 2021

Can you upload on the folder banners or headers?

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

ok this is not a hosting issue.

You are failing one of these checks:

// Access check
		if (!$user->authorise('core.manage', 'com_media')
			&& (!$asset || (!$user->authorise('core.edit', $asset)
			&& !$user->authorise('core.create', $asset)
			&& count($user->getAuthorisedCategories($asset, 'core.create')) == 0)
			&& !($user->id == $author && $user->authorise('core.edit.own', $asset))))
		{
			throw new NotAllowed($this->app->getLanguage()->_('JERROR_ALERTNOAUTHOR'), 403);
		}

so ... the question is which, and why...

Whats the history of this site? is it an upgrade? an upgrade from what?

Please try applying the patch here #35397 or testing the nightly build here https://developer.joomla.org/nightly-builds.html

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

Are you logged in as a super admin or other type of user?

avatar paydelott
paydelott - comment - 28 Aug 2021

super admin. I even set up duplicate super accounts. No difference.

I first set up the account as an upgrade from a new 3.10. That initially
showed the problem. Then I did a manual reinstall copying all files from a
complete 4.02 version I had uploaded. No change.

On Sat, Aug 28, 2021 at 4:07 PM Phil E. Taylor @.***>
wrote:

Are you logged in as a super admin or other type of user?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEEPTNOL6457EZZ5BXDT7FFY3ANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar paydelott
paydelott - comment - 28 Aug 2021

Added the edit action as advised. No change.

On Sat, Aug 28, 2021 at 4:13 PM Paul Aydelott @.***>
wrote:

super admin. I even set up duplicate super accounts. No difference.

I first set up the account as an upgrade from a new 3.10. That initially
showed the problem. Then I did a manual reinstall copying all files from a
complete 4.02 version I had uploaded. No change.

On Sat, Aug 28, 2021 at 4:07 PM Phil E. Taylor @.***>
wrote:

Are you logged in as a super admin or other type of user?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEEPTNOL6457EZZ5BXDT7FFY3ANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

after adding it - go to the OPTIONS button in media manager and click save and close. And try again.

On 28 Aug 2021, at 22:22, paydelott @.***> wrote:

Added the edit action as advised. No change.

On Sat, Aug 28, 2021 at 4:13 PM Paul Aydelott @.***>
wrote:

super admin. I even set up duplicate super accounts. No difference.

I first set up the account as an upgrade from a new 3.10. That initially
showed the problem. Then I did a manual reinstall copying all files from a
complete 4.02 version I had uploaded. No change.

On Sat, Aug 28, 2021 at 4:07 PM Phil E. Taylor @.***>
wrote:

Are you logged in as a super admin or other type of user?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEEPTNOL6457EZZ5BXDT7FFY3ANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.


You are receiving this because you commented.
Reply to this email directly, view it on GitHub #35400 (comment), or unsubscribe https://github.com/notifications/unsubscribe-auth/AADBVXBWSSQRL5ZGU4SE5NTT7FHS3ANCNFSM5C6NFQAA.

avatar brianteeman
brianteeman - comment - 28 Aug 2021

Fix permissions and ownership on files and folders and try again, also remove all .htaccess files and try again.

Then I did a manual reinstall copying all files from a complete 4.02 version I had uploaded.

did you check the onwership?

avatar PhilETaylor
PhilETaylor - comment - 28 Aug 2021

This is not a file ownership issue. Its a Joomla ACL levels issue and its failing in this access check

avatar paydelott
paydelott - comment - 29 Aug 2021

Edited outside Joomla in cpanel and restarted Joomla.

On Sat, Aug 28, 2021 at 4:23 PM Phil E. Taylor @.***>
wrote:

after adding it - go to the OPTIONS button in media manager and click save
and close. And try again.

On 28 Aug 2021, at 22:22, paydelott @.***> wrote:

Added the edit action as advised. No change.

On Sat, Aug 28, 2021 at 4:13 PM Paul Aydelott @.***>
wrote:

super admin. I even set up duplicate super accounts. No difference.

I first set up the account as an upgrade from a new 3.10. That
initially
showed the problem. Then I did a manual reinstall copying all files
from a
complete 4.02 version I had uploaded. No change.

On Sat, Aug 28, 2021 at 4:07 PM Phil E. Taylor @.***>
wrote:

Are you logged in as a super admin or other type of user?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<
https://github.com/joomla/joomla-cms/issues/35400#issuecomment-907689778>,
or unsubscribe
<
https://github.com/notifications/unsubscribe-auth/ABM6ZEEPTNOL6457EZZ5BXDT7FFY3ANCNFSM5C6NFQAA

.
Triage notifications on the go with GitHub Mobile for iOS
<
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675

or Android
<
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub
.


You are receiving this because you commented.
Reply to this email directly, view it on GitHub <
https://github.com/joomla/joomla-cms/issues/35400#issuecomment-907691302>,
or unsubscribe <
https://github.com/notifications/unsubscribe-auth/AADBVXBWSSQRL5ZGU4SE5NTT7FHS3ANCNFSM5C6NFQAA
.


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEEWY4CRHUMDUQQG3XTT7FHWPANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar paydelott
paydelott - comment - 30 Aug 2021

Attempted to login to home page to edit article and add image.

First attempt: login successful with edit button appearing on home page article. JCE edit shows, image upload button works to select image, but attached error page shows. Apparently logged out from front-end.
Second and subsequent login attempt immediately show the attached error page.
loginError
Note: this is consistent with the same error in #35244. No caching either in Joomla or by Cloudflare. Website is shared hosting by Siteground.

avatar PhilETaylor
PhilETaylor - comment - 30 Aug 2021

Siteground

Ok before we go any further go and DISABLE all the aggressive SiteGround CACHING features which are well documented at breaking things joomla and non-joomla!!!

avatar paydelott
paydelott - comment - 30 Aug 2021

All caches were turned off. Yeah, can't test with cache on.

avatar paydelott
paydelott - comment - 1 Sep 2021

It appears that what is happening is that my session is being killed before the upload takes place. Therefore I must constantly login. This is the error showing in my host's error log:
2021-09-01 14:24:05 UTC [apache][:notice] [pid 81191] [client 67.143.160.151:54578] mod_hive matched URI http://dust-n-shavings.com/administrator/index.php (/home/u1577-wcezfu0gtrdi/www/dust-n-shavings.com/public_html/administrator/index.php) with match 10, referer: http://dust-n-shavings.com/administrator/

avatar PhilETaylor
PhilETaylor - comment - 1 Sep 2021

mod_hive Siteground by any chance?

avatar paydelott
paydelott - comment - 1 Sep 2021

Yes. Perhaps this is a Siteground problem with their version of Apache?

On Wed, Sep 1, 2021 at 9:30 AM Phil E. Taylor @.***>
wrote:

mod_hive Siteground by any chance?


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZECTWDPT5Z4H4NKHWXLT7Y2JBANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar PhilETaylor
PhilETaylor - comment - 1 Sep 2021

mod_hive later known as 1h.com (ironically their own website is no longer working) is a Siteground security product.

Move web hosts or turn off Siteground specific security tools - then test.

avatar paydelott
paydelott - comment - 1 Sep 2021

Thanks. I'll take up the issue with Siteground.

On Wed, Sep 1, 2021 at 9:34 AM Phil E. Taylor @.***>
wrote:

mod_hive later known as 1h.com (ironically their own website is no longer
working) is a Siteground security product.

Move web hosts or turn off Siteground specific security tools - then test.


You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#35400 (comment),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABM6ZEFNIWVZCVD37N4IJPLT7Y2X5ANCNFSM5C6NFQAA
.
Triage notifications on the go with GitHub Mobile for iOS
https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675
or Android
https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

avatar paydelott
paydelott - comment - 1 Sep 2021

Advise to the wise. Forget Siteground as a host that specializes in Joomla. That appears to have changed. No help from their support desk.

avatar paydelott paydelott - change - 1 Sep 2021
Status New Closed
Closed_Date 0000-00-00 00:00:00 2021-09-01 15:05:21
Closed_By paydelott
avatar paydelott paydelott - close - 1 Sep 2021
avatar PhilETaylor
PhilETaylor - comment - 1 Sep 2021

Forget Siteground as a host

This happened several years ago when they first started increasing their prices by a huge percentage. They used to be the flagship forerunner but went down hill very very quickly :-(

Their tech is still second to none - but it causes more issues than it solves on dynamic sites.

Add a Comment

Login with GitHub to post a comment