Recently Viewed...
DNN Modules
SnowCovered Top Sellers

Document Exchange 5

Edit documents directly on your server. The premier document management solution for DotNetNuke (DNN). Index contents of documents. Share documents across your portal and avoid duplicates. Revised and flexible UI. Extensible architecture.

Opt In Email 4.0

'Relationship Building' and 'Communication' are two essential nuts and bolts for a business to prosper. This module allows you to bridge both of these and easily generate continuous awareness of your web site, products and services. Your prospects and customers will greatly appreciate this featur

Live Content v1.6 :: Web 2.0

Live Content uses Web 2.0 approach to provide a Rich User Interface and streamlines content presentation by overlaying content on current page. Overlay images, videos, audio, text/html content, flash, dotnetnuke modules, and external content. Experience the demo...

Catalyst By DrNuke

The Catalyst skins are professionally designed, coded and packaged by a team of DotNetNuke experts. The skins are available in 12 great colours. This skin is easily customisable with our unique DrNuke EasyMod technology. Try our demo!

Dynamic Forms 2.7

In this day and age, knowing as much detailed information as possible about your customer, prospect or web site user is essential. Thankfully, the new 'Dynamics Forms' module from Data Springs, makes it easier than ever to segment your data collection efforts.

Ultra Video Gallery 2.4

Ultra Video Gallery is a brother product of Ultra Media Gallery, UVG allows you to add videos in various format and automatically convert them to flv format, you also can add videos from embed code and play them in our integrated flash video player.

Ultra Media Gallery 5.4

Ultra Media Gallery is the most popular photo gallery and media gallery solution for DotNetNuke, UMG offers 10 different flash player to browse your gallery with completely different user interface experience.

Data Springs Collection 2.0 (20+ Modules)

Capture your users attention, enrich your site with multimedia flash, and create and opt in distribution list for your DNN site. These are just a few of the many features the Data Springs Module Collection can provide you.

XMod 5.1

Version 5 of the perennial best-selling tool for creating data-based solutions in DNN without custom programming. This version focuses on greater flexibility, expandability, and ease-of-use.

Minimalist by Evan O'Neil - ALL NEW !

ALL NEW ! - Minimalist includes skin packs in 12 great colors. Each color has Flat, Gradient and Glass versions. Feature rich XML Flash header, perfect for just about any purpose. 9 Different menu options in each skin pack; 3 horizontal menus, 3 vertical menus and 3 all-new Twin level menus . . .

    |   Register   |   Sunday, November 23, 2008   
Data Springs Product Forums...
Forums > Product Discussion - DotNetNuke Modules > Dynamic Registration
Subject: Security role not recognized when updating
Prev Next
You are not authorized to post a reply.

Author Messages
David
Posts:7
skipping stones
skipping stones
07/11/2008 2:31 PM  

I am posting here a discussion begun by email with Chad.

PROBLEM

I have several flavors of registration and forms for the portal's (4.8.2) membership. When a person registered first time, it assigns a 'guest' role, no payment is required. This DynReg module redirects to a page where now, a portal user, the see additional content on a public page. This works fine.

If that 'guest' member now completes another process (a different DynReg form) which is set to add now a "member" role. It either redirects to another form for payment screen (DynForm) or to a pay by check invoice screen based on a Completion Event.  After this process,either way, the user can not see pages specific to that role unless they log out and back in.

At first I believed it was because some registrants are redirected to a page different from the module's general setting's completed redirect. But further testing shows that it doesn't work either way.

At Chad's suggestion I updated the module to the latest build, and added some SQL completion event to reset the role's start date to null:

Update UserRoles
Set EffectiveDate = Null
Where UserID = $(UserID) 

SO ANY IDEAS? Again, I believe the problem is when the user is UPDATING rather than REGISTERING.

Thanks! David
David
Posts:7
skipping stones
skipping stones
07/14/2008 5:26 PM  

More - note that the DynForms module works (with workaround at least) as expected, with our without redirect completion event.

dkl
David
Posts:7
skipping stones
skipping stones
07/16/2008 2:43 PM  
Further testing -

To be sure it wasn't the intallation or weird data, I ran a test:

Page 1 = Dynamic Registration module with simple (DNN integrated) reg. fields. + I have one field with a choice of 2 roles or "none". This field drives which role I give the user - "guest", "member" as completion events, depending on choice. The module general setting is to redirect to Page 2 for either Register or Update.

Page 2 = 3 modules with differing view permissions - Viewed by All users, guest only or member only.

Results:
1. For the primary first time registration, everything works fine, no matter whether I select a role or none option. It correctly adds and subtracts the roles as instructed.

2. The "none" does not have a completion event; and if selected, the system correctly removes any existing member or guest role from the User in Register or Update mode.

3. Even without the "fix" for the date, the content on page 2 will display and hide according to the role assigned on REGISTER.

ON UPDATE (2nd time through the form)

4. The role is correctly added and removed from the user, as selected.

5. However, the data on page 2 will only display according to the role the user had when it FIRST logged in (whether that is by registering with the form or by logging out and back in). If the user was say a GUEST role when logging in, goes through the UPDATE form and this time selects "member' - after redirect the user only sees the GUEST content on page 2 - EVEN THOUGH HE DOES NOT HAVE THE ROLE ON HIS RECORD at this point; and he does not see the member content, even though he has the role.

~~~~~~~~~

So the bug is in the updating sequence - the user's credentials are not refreshed (which would assume would happen as the last thing before redirect events or general setting).

See what you find testing this...

THANKS!! David
Chad
Posts:2227
river guide
river guide
07/16/2008 3:55 PM  
Hello. Yes we are reviewing this, after first glance it appears that the user needs to sign out and sign back in before DNN will recognize the updated security roles.

We are reviewing if we will be able to change this and add some code to either log the user out and back in after being added to a role, or somehow clear the cookies/cache and reload the cookies and cache for the user.

I think a similar situation would happen if the user was signed in, you went to Admin, User Accounts and gave them access to a security role, and then the user navigate to a page requiring that role (I think in this situation they would also have to sign out and sign back in).

-Chad
Chad
Posts:2227
river guide
river guide
07/16/2008 6:00 PM  
Hi, I think we found the solution... We will be working on a patch.

-Chad
Chad
Posts:2227
river guide
river guide
07/16/2008 6:24 PM  

David, we have a patch for this now. We will send it over and after you review will make it available to all users within the next patch/hot fix. Thanks for your detailed explanations.

-Chad
Marco
Posts:4
skipping stones
skipping stones
10/22/2008 11:00 AM  
Hi there, was there a patch released for this? I am running Dynamic Forms version 2.5/ DNN version 4.6.2 and getting the same error.

I have a form completion event adding the user to a role, then redirecting to a page that requires that role. It seems to cache the user role info as it gives me a permission denied error even though the user has been added to the role.

Thanks so much in advance.

Marco Andrade
David
Posts:7
skipping stones
skipping stones
10/22/2008 11:40 AM  

Marco,

I have updated both the Dynamic Forms and Dynamic Registration to the latest version and the problem has not resurfaced. I think that is your best bet. You should be able to get them on Snowcovered.

Just FYI the work-around of setting the role's start date to null also worked fine. Just note that it sets ALL the user's roles' start date to null so be careful if you are using subscriptions, etc.

David
Marco
Posts:4
skipping stones
skipping stones
10/22/2008 11:47 AM  

Hi, you updated to Dynamic Forms 2.7?
Marco
Posts:4
skipping stones
skipping stones
10/22/2008 11:56 AM  

Hi,

The setting of the effective date in the userroles table as another form completion event does not work for me. It still gives a permission denied on the page even though it shouldnt. After 30-40 seconds it lets the user in the page, or if the user logs out then back in.
Chad
Posts:2227
river guide
river guide
10/26/2008 7:05 PM  
Marco,

Hi. Yes this should be fixed in both Dynamic Forms and Dynamc Registration, what version are you running on? Specific version such as 2.5.x etc... If you go to Host, Module Definitions, what version does it show you are running? Also, please log into www.betasprings.com and see if you can duplicate the issue or run into your implementation w/ problems there.

-Chad
Marco
Posts:4
skipping stones
skipping stones
10/27/2008 6:15 AM  

Hi there. I updated to Dynamic Forms 2.7 and it works like a charm. Thanks!

- Marco
You are not authorized to post a reply.
Forums > Product Discussion - DotNetNuke Modules > Dynamic Registration > Security role not recognized when updating


ActiveForums 3.7

Copyright 2005 - 2008 by Data Springs, Inc.
Terms Of Use | Privacy Statement