Loading...
 
Skip to main content

RSS Feeds on private trackers report "Tiki RSS Feed Error Message: You do not have permission to view this section"

  • Tracker item actions
Trackers
Items
Status
Open
Subject
RSS Feeds on private trackers report "Tiki RSS Feed Error Message: You do not have permission to view this section"
Version
6.x
Category
  • Error
  • Usability
  • Patch
Feature
RSS
Trackers
Resolution status
New
Submitted by
aleu
Lastmod by
aleu
Rating
(0)
Description

I am pretty new at this, so I am not sure if I posted the bug and patch at the correct place and in the correct form. Please let me know if I should change something. Unfortunately I do not have time at the moment to learn how to commit patches via SVN and am also a bit unsure about my fix, so please take a look and include it in the next release if you think it is correct.

Scenario:
Tiki LTS 6.6, Tracker not publicly accessible (by anonymous users), RSS Feeds enabled, RSS for Trackers and for Individual tracker items enabled, RSS basic Authentication enabled.

Behaviour:
If I try to subscribe to the RSS feeds of my tracker (by adding http://tiki.***.***/tiki-tracker_rss.php?trackerId=9 to Outlook) I always get the error "Tiki RSS Feed Error Message: You do not have permission to view this section". Same happens if I log out of Tiki and copy the address in my browser.

Solution

It seems that Tiki never asks for a user name and password to login for Tracker RSS (which it does for Wiki RSS) and always assumes publicly available content. After comparing "tiki-tracker_rss.php" and "tiki-wiki_rss.php" I found these lines to be missing in the "tiki-tracker_rss.php" file. I figured out they are responsible for authenticating the RSS reader and after adding them below ...if (!isset($_REQUEST%22trackerId%22))... it worked.

Code to be added
Copy to clipboard
$res=$access->authorize_rss(array('tiki_p_view', 'tiki_p_wiki_view_ref'));
if($res) {
   if($res['header'] == 'y') {
      header('WWW-Authenticate: Basic realm="'.$tikidomain.'"');
      header('HTTP/1.0 401 Unauthorized');
   }
   $errmsg=$res['msg'];
   require_once ('tiki-rss_error.php');
}
Importance
7
Easy to solve?
9
Priority
63
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
4164
Created
Monday 20 February, 2012 11:02:40 UTC
by aleu
LastModif
Monday 20 February, 2012 11:02:40 UTC


Show PHP error messages