When trying to edit a member's profile information in backend I receive a popup stating:

Message from webpage:
"Not Authorized"

I am logged in a superuser, and this admin only belongs to this group of superusers. At least all I can see listed shows the admin as a superuser (both in Joomla and CB User manager screens).

I am running Joomla 1.7.3, CB 1.7.1, CB Subs 1.2.2

I was attempting to update a field (text field) and received this message. I also cannot edit any other field as it too results in the same Not Authorized popup message.

Had a post in Advanced, was hoping this posting might get a faster answer being it is in Professional.

I tried earlier to resolve the issue by unpublishing all non-core, non-cb subs plugins and nothing fixed the issue. Seems to be an issue solely with CB Subs as it did not start until cb subs was loaded.

Scott

Okay the issue is gone, although I cannot exactly tell you what I did that may have fixed the issue. But here is what I did.

In trying to modify a custom text field in the demo/test user's profile I would always get the not authorized popup message on the backend.

This particular text field I was trying to change was being used and set upon activation and expiration or cancellation of a users subscription. The field is supposed to be set using the integration feature under the CB Subs Plan section. I set it up to set the textfield as "Active" (without the quotes) upon an active subscription and to remove or erase the field upon an expired or non-active subscription. I was using the Active entry of this field as a condition to show the user in the Random User module. I had to have something that changed with the members subscription so non-active users would not be shown in the random module, so this was the purpose of this field.

Ok enough with the explanation of the use of this field and what I did to try and fix the issue with the Not Authorize issue.

I logged into the test account and went to the Edit Profile page. This particular field was located under the User Status tab which had the CB Subs with no conditions (No, Normal CB Settings) on both A & B settings for the cb subs section under the field.

Under the user's edit mode I was able to populate the text field and added in the Active text to the field. I saved it with no issues. This lead me to believe that it must have been an issue with CB subs permissions in the backend when trying to edit a member profile using Super User account. I then changed the CB Subs setting for this field to the following;

A: Yes, CB Subs control detailed field access.
A-1: Selected all the plans I have (3 of them) as this field affects all plans.
A-2: No, profile owner himself is also restricted. wit no selection of plans
A-3: Yes for both choices

I saved it and then retried editing it as a Super User in backend and it allowed me to edit the field, as well as all other fields in users profiles. Not sure why adding this one change affected all the other fields editing ability as well. But I can say that this was the only field I used Detailed selection for CB Subs settings. All other fields were just Yes, CB Subs controls field.

I then moved this field to an Admin only tab to hide it from the user.

Ok hope this helps anyone else experiencing this issue. I am makng the assumption that at least one of the fields must have the CB Subs Moderator setting set to allow editing by moderators. Weird as to why this is so. Any other input on this is appreciated. Maybe I am still missing something.

Hi,

is there any update on this, has this been fixed? I don't find the Bugtracker ID anywhere.

Joomla 2.5.4, CB 1.8, CB Subs 1.2.2

Thanks.

Greets,
ndee

Hi Kyle,

it took many hours to find out but it seems there is another issue triggering "Not authorized" in backend edit mode.

At least for me this bug is related to CB itself. If you move the params field to a unpublished tab.
Here is the Bugreport:
www.joomlapolis.com/forum/147-potential-bug/198038-not-authorized-error-if-params-field-missing#198038