Support

Before I upgraded to Admin Tools 3.1.1 a custom URL I used for parameter passing of an Ohanah (v2.3.15) event id to a Fabrik (v3.0.9) form worked, but since the upgrade it doesn't, so I'm suspecting a feature in Admin Tools is the cause and would like to know how I can set an exception for it.

I have read and tried variations of the WAF Exception settings for the components involved, which are com_content, com_ohanah, and com_fabrik. Setting exceptions with only these three components, and leaving the View and Query blank/(All) didn't work for me.

The  arrangement is, I have an Ohanah event where I'm using the custom url option to link to a Fabrik form and where the Ohanah event id parameter is passed in the url as follows:

http://www.mysite.org/index.php/request-form/?ohanah_event_id={EVENT_ID}

From the support advice I got from Ohanah this query is used to pass the event id value for any particular event in a list of events (mod_ohanahevents) the user may choose, to the form, so that it's value (e.g. event date) can be shown and stored with the form.

The links from the event list module to the form when clicked and working should be, for one example (id=27):

http://www.mysite.org/index.php/request-form/?ohanah_event_id=27

Hoping you can point me in the right direction. I can give Admin access if needed.

Hello Davide,

Thanks for the quick response. I tried with only one WAF Exception: nocomponent (all), noview (all), query (ohanah_event_id), unfortunately it didn't work.

The security exceptions raised are:
"Sorry, but you are not authorised to add this record" and
"You are not authorised to view this resource"

I experimented with permission settings and found this work around:
I found that when as superuser logged in, it worked.
Registered users didn't work, so I experimented.
If I added Author to the Registered group access it works (adds create and edit)

Malc

Hi Davide,

Disabled Admin Tools plugin and the problem persisted, so nothing at all to do with Admin Tools. Should have tried that before, duh!

You put me on the right track anyway. Turns out when fiddling with the Viewing Access Levels for Special, I didn't have the Registered group ticked. Obviously still on the learning curve of ACL :)

Thanks for helping me figure this out. All good now, and at least I'm more aware of what Admin Tools can do.

Malc