CRM-19991 KCFinder You must be logged in with proper permissions to edit, add, or delete uploaded images

          Details

          • Type: Bug
          • Status: Open
          • Priority: Trivial
          • Resolution: Unresolved
          • Affects Version/s: 4.7.15
          • Fix Version/s: None
          • Component/s: None
          • Labels:
            None
          • Versioning Impact:
            Patch (backwards-compatible bug fixes)
          • Documentation Required?:
            None
          • Funding Source:
            Needs Funding
          • Verified?:
            No

            Description

            When trying to upload images, in CiviCRM mail editor, using the CKEditor, the CKFinder plugin generates this error.

            All image upload and access CiviCRM permissions are checked within Drupal for the current user, however it appears CKFinder is not authenticating the user. This appears to be a known issue per https://wiki.civicrm.org/confluence/display/CRMDOC/Adding+CKFinder+with+Authentication+to+CiviCRM . The link appears out of date though, with the files mentioned in this document non existent.

            It would great if this fix was added into the core, so hacking CiviCRM isn't required.

            The URL generating the error is:
            /sites/all/modules/civicrm/packages/kcfinder/browse.php?cms=civicrm&type=images&CKEditor=crmUiId_1&CKEditorFuncNum=0&langCode=en-gb

              Attachments

              1. cannot browser.png
                25 kB
                Adam Kwiatkowski
              2. image-upload-editor.jpg
                226 kB
                Adam Kwiatkowski

                Activity

                [CRM-19991] KCFinder You must be logged in with proper permissions to edit, add, or delete uploaded images
                Eileen McNaughton added a comment -

                I've discovered that when loading kcfinder it is possible for a disabled module to cause it to be unavailable. The mechanism is that in this path CRM_Core_Session::checkStatus() is called before bootstrapping is complete & bootstrapping later does NOT fully complete, falling over when it hits

                ini_set('session.use_trans_sid', '0');

                on 'Warning: ini_set() A session is active'

                  People

                  • Assignee:
                    Unassigned
                    Reporter:
                    Adam Kwiatkowski

                    Dates

                    • Created:
                      Updated: