View Issue Details

IDProjectCategoryView StatusLast Update
0010162mantisbtadministrationpublic2010-04-23 23:22
Reporterthegisguy Assigned Todhx  
PrioritynormalSeveritycrashReproducibilityalways
Status closedResolutionunable to reproduce 
Product Version1.1.6 
Summary0010162: APPLICATION ERROR #2800: Invalid form security token. Did you submit the form twice by accident?
Description

I added a new user group to mantis below viewer. I was hoping to be able to limit this group to only be able to report issues, but not view issues. Adding the group went fine. However now when I change the permissions of the group I get the error #2800 when I attempt to report an issue. I get this error for any user in the project.

Steps To Reproduce
  1. Create New User group.
  2. Add or remove a permission for this group.
  3. Update the configuration on the work thresholds page.
  4. Attempt to report new issue as any user in the project.
Additional Information

I downloaded and replaced the file attached to Issue Number 0009986. This had no effect.

TagsNo tags attached.
Attached Files
config_inc.php (2,368 bytes)   
<?php
$g_phpMailer_method = 2;
$g_smtp_host = 'localhost';
$g_show_report = ADVANCED_ONLY;
$g_default_advanced_report = ON;
$g_allow_signup = OFF;
$g_allow_anonymous_login = ON;
$g_anonymous_account = 'MapRequest';

# threshold for viewing roadmap
$g_roadmap_view_threshold = NOBODY;
   
# threshold for updating roadmap, target_version, etc
$g_roadmap_update_threshold = NOBODY;

	$g_hostname = 'localhost';
	$g_db_type = 'mysql';
	$g_database_name = 'bugtracker_mod';
	$g_db_username = 'root';
	$g_db_password = '';

	###########################
	# Mantis Enum Strings
	###########################

	# --- enum strings ----------------
	# status from $g_status_index-1 to 79 are used for the onboard customization (if enabled)
	# directly use Mantis to edit them.
	$g_access_levels_enum_string		= '5:map_requestor,10:viewer,25:reporter,40:updater,55:developer,70:manager,90:administrator';
	$g_project_status_enum_string		= '10:development,30:release,50:stable,70:obsolete';
	$g_project_view_state_enum_string	= '10:public,50:private';
	$g_view_state_enum_string			= '10:public,50:private';
	
	$g_priority_enum_string				= '10:none,20:low,30:normal,40:high,50:urgent,60:immediate';
	$g_severity_enum_string				= '10:minor,20:major,30:crash,40:N/A';
	$g_reproducibility_enum_string		= '10:always,30:sometimes,50:random,70:have not tried,90:unable to duplicate,100:N/A';
	$g_status_enum_string				= '10:new,20:feedback,30:acknowledged,40:confirmed,50:assigned,80:resolved,90:closed';
	  # @@@ for documentation, the values in this list are also used to define variables in the language files
	  #  (e.g., $s_new_bug_title referenced in bug_change_status_page.php )
	  # Embedded spaces are converted to underscores (e.g., "working on" references $s_working_on_bug_title).
	  # they are also expected to be english names for the states
	$g_resolution_enum_string			= '10:Completed,20:Not Completed,30:Fixed,40:Can Not Fix';
	$g_projection_enum_string			= '10:none,30:tweak,50:minor fix,70:major rework,90:redesign';
	$g_eta_enum_string					= '10:none,20:< 1 day,30:2-3 days,40:< 1 week,50:< 1 month,60:> 1 month';
	$g_sponsorship_enum_string          = '0:Unpaid,1:Requested,2:Paid';

	$g_custom_field_type_enum_string    = '0:string,1:numeric,2:float,3:enum,4:email,5:checkbox,6:list,7:multiselection list,8:date';

?>
config_inc.php (2,368 bytes)   

Relationships

child of 0010627 closeddhx Ensure all forms use CSRF protection 

Activities

thegisguy

thegisguy

2009-03-03 09:17

reporter   ~0020988

Any one got an idea?

jreese

jreese

2009-03-03 13:23

reporter   ~0020991

What do you mean by user groups? Mantis does not have any notion of "groups", unless you are meaning access levels (VIEWER,DEVELOPER,etc).

Also, are you using a proxy server at all?

thegisguy

thegisguy

2009-03-04 13:00

reporter   ~0020998

Sorry, wrong verbiage. I meant Access Level.

No Proxy server.

thegisguy

thegisguy

2009-03-04 13:06

reporter   ~0020999

Is it possible I applied the patch in issue 0009986 incorrectly? I just downloaded and replaced the existing file with the new file. Do I need to do something else? Or is this an issue with the new access level?

jreese

jreese

2009-03-04 18:17

reporter   ~0021000

Can you post your config_inc.php file, and a paste of what shows on your configuration report page?

thegisguy

thegisguy

2009-03-05 08:05

reporter   ~0021001

Database Configuration
Username Project Name Configuration Option Type Value Access Level Actions
All Users All Projects database_version integer 63 administrator
All Users All Projects main_menu_custom_options complex

array (
0 =>
array (
0 => 'plugins_pluginmanager_link',
1 => 10,
2 => 'plugins_page.php',
),
)

administrator   

All Users ER GIS add_bugnote_threshold integer 25 administrator
All Users ER GIS allow_reporter_reopen integer 1 administrator
All Users ER GIS monitor_bug_threshold integer 25 administrator
All Users ER GIS plugins_myreport_enabled string '1' administrator
All Users ER GIS plugins_myreport_field_list string ',category,severity,priority,--,summary,*description,additional_information,--,custom,--,upload_file,view_status,report_stay' administrator
All Users ER GIS report_bug_threshold complex

array (
0 => 5,
1 => 25,
2 => 40,
3 => 55,
4 => 70,
5 => 90,
)

administrator   

All Users ER GIS set_view_status_threshold integer 25 administrator
All Users ER GIS update_bug_assign_threshold complex

array (
0 => 5,
1 => 25,
2 => 55,
3 => 70,
4 => 90,
)

administrator   

All Users ER GIS view_changelog_threshold integer 10 administrator
All Users ER GIS view_handler_threshold integer 10 administrator
All Users ER GIS view_history_threshold integer 10 administrator
All Users Map Request add_bugnote_threshold integer 25 administrator
All Users Map Request change_view_status_threshold integer 40 administrator
All Users Map Request monitor_bug_threshold integer 25 administrator
All Users Map Request set_view_status_threshold integer 25 administrator
All Users Map Request update_bug_threshold integer 40 administrator
All Users Map Request view_changelog_threshold integer 10 administrator
All Users Map Request view_handler_threshold integer 10 administrator
All Users Map Request view_history_threshold integer 10 administrator

jreese

jreese

2009-03-05 12:02

reporter   ~0021005

Thank you. I'll look into this as soon as I get the time.

dhx

dhx

2009-07-06 13:55

reporter   ~0022425

Unable to reproduce in 1.2.x