Phoca Forum

Hi,
I'm trying to setup file upload from frontent - but I keep getting the message "You are not authorized to do this action" when I try the new menu item in frontend.

What I have done:
Created a menu item for user upload - I'm part of the group which has access to the menu item.
Said Yes to Enable user upload in the global configuration of Phoca Download.
Entered my self as a user in one of the categories under Upload Rights.

So what am I missing?

Joomla 3.9.13
Phoca Download 3.1.9
Template Shape 5 - shape5_vertex 4.2.0

Thanks,
Claus Lücking

Hi, do you have access rights to the category? Can you paste a screenshot of the error message?

Jan

Yes - I added my self as possible user for upload.
https://photos.app.goo.gl/YFZ3b6RZdj7YkGCi6

https://photos.app.goo.gl/o3LfaGcD11WSfXtp6

Try to set "Adgang" to registered. Is your menu link set for public displaying?

Jan

Hi Jan,
I have tried changing Adgang to registered and also changed the menu item to Public but neither of those changes solved the issue :-(

Finally had some progress Jan. I gave my self the authorization "Registered" and then I can upload. But actually we don't use that joomla group definition - we have defined our own groups.
Is the group hardcoded into the component in a way so we have to use it or is there a place we can enter our own permission group in the component?

Thanks.

Claus.

Hi, you can define own ACL group there and select it in Phoca Download:


Jan

Hi,
Still have issue with this. Only when I flag myself as standard "Registered" or "Super Users" I am able to see the upload possibility in frontend - when I set in a customized ACL group in the category as you show above.

I think the problem is more and less the same as another users have raised here:
viewtopic.php?f=31&t=60915
viewtopic.php?f=31&t=61036

Best regards,

Claus.

Hi, see the posts, Access Rights extends Access and if you set Access and extend it through the Access Rights (you will just specify one user from the group), the user must belong to such group. Otherwise he/she will be not able to access the files.

In such case there are two rules checked.

First - it is checked if the user is not a part of the group
Second - if Access Rights is set, then the user is checked if he/she is selected in the Access Rights.

Example 1:


I am not logged in: I cannot access the file
I am logged in as jan: I can access the file (jan is a part of registered and registered is group having viewing access for NewAccessLevel)

Example 2:

I am not logged in: I cannot access the file
I am logged in as jan: I cannot access the file ... because as jan I am not a part of the group Super Users

Example 3:


I am not logged in: I cannot access the file
I am logged in as jan: I can access the file because jan is in group NewAccessLevel (in this case only group is checked as the user is not set)

Access Rights just extends the Access and the user must be a part of the group.

Jan