?
avatar heleneross
heleneross
9 Apr 2016

Steps to reproduce the issue

Note: The component generating this error has been fixed, but you can test what happens using the following url when logged in at the backend
index.php?option=com_config&task=config.store&format=raw&comp=not&action=core.create&rule=1&value=1&title=false

Expected result

updated permissions for component in assets table

Actual result

Adds an item to the asset table with parent_id of 0 and level of 0, which breaks the asset table

System information (as much as possible)

Affects Joomla 3.5.0 and 3.5.1

Additional comments

The url for the permissions page for the component was missing some of the parameters that permissions.js was looking for, the url looked like index.php?option=com_componentname&task=params.edit
either permissions.js or store.php should do better checks. Currently, if var asset in permissions.js is not set by the if statements then it keeps the default value of 'not' which is then used as the component name, this passes the checks in store.php on line 43, so a bad value gets stored in the asset table.
screen shot 2016-04-09 at 11 55 13

avatar heleneross heleneross - open - 9 Apr 2016
avatar brianteeman brianteeman - change - 9 Apr 2016
Status New Confirmed
avatar brianteeman brianteeman - change - 5 Aug 2016
Status Confirmed Closed
Closed_Date 0000-00-00 00:00:00 2016-08-05 14:16:14
Closed_By brianteeman
avatar brianteeman
brianteeman - comment - 5 Aug 2016

Thanks for reporting this. It appears that a recent change has prevented this from happening as I can not replicate this in Joomla 3.6.2 so I am closing it. If I am wrong then it can always be reopened for further investigation


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/9816.

Add a Comment

Login with GitHub to post a comment