Project

General

Profile

Actions

Bug #8622

closed

system_usermanager.php: Group selections not retained when an input error occurs

Added by Andrew Rud over 5 years ago. Updated over 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
User Manager / Privileges
Target version:
Start date:
07/06/2018
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.4.3_1
Affected Architecture:
All

Description

When doing such a simple thing as adding a ssh key, I completely deprived myself of access to webgui or ssh and was able to restore it only with the help of another administrator.

steps:
1. open /system_usermanager.php?act=edit&userid= myuserid
2. make some changes AND make a mistake in filling in the fields (different content of Password and PswdConfirmation fields for example) and press SAVE.
then page will be refreshed with error message on the top; but all my groups have moved from right list "Member of..." to left "Not member of". It's easy not to notice this.
3. fill fields with no mistakes and press SAVE
4. Done! All that you can see under your account now is No page assigned to this user! Click here to logout error page. SSH login is also no longer possible.

Reproduced on Firefox 62Dev, Chrome 69Dev without any script blocker

Actions #1

Updated by Jim Pingle over 5 years ago

  • Project changed from pfSense Packages to pfSense
  • Category set to User Manager / Privileges
  • Status changed from New to Confirmed
  • Affected Architecture All added
  • Affected Architecture deleted ()
Actions #2

Updated by Jim Pingle over 5 years ago

  • Subject changed from loss of groups when editing a user to system_usermanager.php: Group selections not retained when an input error occurs
Actions #3

Updated by Anonymous over 5 years ago

  • Assignee set to Anonymous
Actions #4

Updated by Anonymous over 5 years ago

  • Status changed from Confirmed to Feedback
  • % Done changed from 0 to 100
Actions #5

Updated by Jim Pingle over 5 years ago

  • Status changed from Feedback to Resolved

Looks good now. The page still shows selected groups when I trigger an input error.

Actions

Also available in: Atom PDF