Project

General

Profile

Bug #1388

Cannot authenticate to gui as privileged user when * is setup

Added by Andy Brown about 10 years ago. Updated about 10 years ago.

Status:
Invalid
Priority:
Normal
Assignee:
-
Category:
User Interface
Target version:
-
Start date:
2012-11-09
Due date:
% Done:

0%

Estimated time:
Found in version:
3.2/git
Affected Versions:

Description

Login to TVH webui and add in the default * user, but only give it permissions for webui, not admin/config.
Close browser so cache/session closes. Start browser and go to webui, it will show you the epg tab, etc, but not the config tab as you've 'authenticated' as the anonymous user.
There isn't a login button/any way to then authenticate to get into the configuration tabs or any other permission controlled tabs, as tabs are hidden from view when permissions aren't set rather than displayed but then require authentication.

Unsure on best way of fixing, potentially make all tabs appear on all security levels and when you click on that you don't have permission for it prompts for login/handles it?

History

#1

Updated by Adam Sutton about 10 years ago

  • Status changed from New to Invalid

I don't think this is likely to be fixed, not even sure whether it should be considered a bug, the code is doing as designed. Though I understand the confusion/frustration.

If you've set an anon user that has UI access and you need to access as admin, simply add the username to the request string:

http://[email protected]:9981

etc..

That will try logging you in as user andy and will therefore prompt you for the password.

Adam

#2

Updated by Walter Purcaro about 10 years ago

I noticed that if you uncheck admin box, related username and password are rejected forever when login. :(

#3

Updated by Adam Sutton about 10 years ago

  • Affected Versions deleted (3.2)

OK, having discussed briefly with Andy my suggestion doesn't work in this case and I realise why.

The way that browsers handle that is they user the user:[email protected] fields ONLY if the server returns an unauth response. Since you have an anon UI access TVH's webserver will not do this and the browser will never both to try.

Put simply if you allow anon UI access then that's all you'll even get even if you want to have an admin with further access. The best approach is to NOT use anon (and passwordless) access to the UI.

Adam

#4

Updated by Walter Purcaro about 10 years ago

Ok, thanks, but webui still accept only admin users. I'm talking about another issue: when I try to login as not-admin user, the server constantly asking for credentials, but if I give it the same every time, it continues to load ui, piece by piece. :S

#5

Updated by Adam Sutton about 10 years ago

Can you submit that as a new bug then.

Ta

#6

Updated by Walter Purcaro about 10 years ago

yes. :)

Also available in: Atom PDF