IPB 4.2.4 permissions bug

[Andrzej Pindor]

Hi,

I'm trying to set permissions on IPB after import from VB4. I found non-deterministic behavior of ACP settings.

I have user - jedrus.tester. His primary group is "Members". His only secondary group is "Spotkania Mazowieckie":

 

Group "Members" has social permissions in section "Profiles" as below:

 

 

Group "Spotkania Mazowieckie" has option "Can access site" set to "Disabled":

 

Now - user jedrus.tester:

• can edit his profile: https://i.imgur.com/Dv86s0Z.png
• can set his cover photo: https://i.imgur.com/ZBOSs4z.png
• can't set his profile photo: https://i.imgur.com/wz48u7I.png

I think there it's a bug. Why one permission is inherited from primary group Members (edit profile / set cover photo) and another (profile photo) is forbidden? When I remove user from secondary group "Spotkania Mazowieckie" he can set his profile photo: https://i.imgur.com/Alzvfaj.png 

Please clarify how permissions inheritance works or confirm that this is an error and when it will be fixed.

[was0009911231]

+1 on the same in 4.2.3

[opentype]

“Positive” and “more” should always take affect. If there is one “allowed” and one “not allowed”, it should be “allowed”. If there is “10MB” and “20MB” it should be “20MB”. 

I can’t see from the screenshots alone what causes that behavior regarding the profile image. 

[Andrzej Pindor]

Do you need more information? It's really easy to reproduce.

Just add new group with "Can see forum" set to disabled and assign user to it as his seconary group. He won't be able to change profile image.

[Nathan Explosion]

Log a ticket if you think you have found a bug.

[Andrzej Pindor]

Where I can do this? I submitted this question from "Support" section in my ACP.

[opentype]

That's one way to do it and should be fine. You can also use the client area here on the site.