New users can't create an account (Regression bug)

BJKline

On my e-commerce site, I upgraded to 2.4 patch 2 from 2.3.9 patch 1. Now new users can't create an account as part of the checkout process. I have tried going to Site Configuration -> User Registration -> I checked the box for "Allow users to create accounts for themselves" and "Use an email address instead of a username" but they still can't create an account. What else could be causing this to happen?

dleffler

I'll look into it...may be a bad side effect of the enhanced security which was necessary to keep hackers out of the site and database.

dleffler

The fix seems to be to comment out line #44 of the addressController.php...that works' locally and will be integrated into the patch 3 coming out within 24 hours.

BJKline

You are correct, commenting out that line restored the functionality.

eVenster

I, as system admin, cannot add any new users at all: I get "× You do not have permission to edit this user account".
version 2.4.2 p1. No matter if it is with or without usergroup, admin, super admin or not.

dleffler

Ok, i have determined the logic error introduced in v2.4.1p6 to prevent rouge admins from elevating their own admin status...I'll have a 242p2 out in a few days.

eVenster

I'll be waiting :-)

dleffler

v2.4.2patch2 is now out and fixes this issue!

eVenster

Thanks! I can make new admins now. 
How can i make it so that visitors can make their own account and be able to present them a page otherwise hidden? I've checked the questions in the USER REGISTRATION tab of the config, but the login module tells them they don't have permission to create. Am i missing something?

dleffler

OK, another regression bug and a patch #4 soon...quick fix would be to edit /framework/modules/users/controllers/usersController.php...around line #27 you'll see 4 lines commented out ($remove_permissions array)...remove the slashes to un-comment them (you should probably leave 'edit' commented out though)

However, if I understand what you are trying to do, you'll want to:

• First you'll want to create a new User Group (Exponent, User Management menu), and check off the 'Is this a Default Group?' You may optionally want to make your special page the group 'login landing page'  (where those users are taken after they log in)?
• Next, make the special page hidden by editing the page (Pages menu) and unchecking 'Public?'
• Next manage group permissions (Pages menu) for the page and give your new group a 'View Page' permission

eVenster

:-) thanks, did that all already, but it starts with the ability to create accounts... I'm not in a hurry, i'll wait for the patch. 

eVenster

Hi Dave,

One step further: with patch 4 users now see the form Create New User Account, but still get the error if they try: You don't have permission to Update Users. So still not working properly

dleffler

Ok, I hope to have a fix for this soon and will have either 242p5 or 243 out soon. This is NOT an issue with creating a new user account on ecommerce checkout though.

eVenster

I've got it working in 2.4.3, but still got 1 problem: in the config user group I can pick a Login Landing Page, but that one doesn't work. Users that login just stay at the page where they login 

dleffler

Two possibilities?
1. They aren't assigned to that user group? (only works for users assigned to that user group)
2. They are assigned to more than one user group? (there's no specific algorithm for which of the groups the page is selected, just the first group/page it finds)

eVenster

In site config, i've checked 'allow users to create account for themselves'. I've created a user group and checked 'Is this a Default Group' and set the Login landing page to a specific page. So, new users fall in the right (and only) group. Am I missing something?

dleffler

That is correct for all new users which are not admins, however the existing users would need to be added to that user group.

eVenster

I've tested it. New users are not send to the langings page i set

dleffler

I've tested it locally and the feature works as expected. Can you confirm the users are actually added/part of that user group?

eVenster

Yes, they are