[Solved] MSM Cross Site Access for Editor
How Do I?
Hi,
We have MSM installed with 3 sites under separate domains. All working well and Admin can navigate the CP for each site ok.
However we have set up a blog editor role who can log in ok, but gets “You are not authorised to view this page” when they try to change site away from the first domain.
Our system files are in a folder outside the roots of each site. Each site has its own admin.php and index.php file as described in the docs and we have set a multi-site login parameter in the config file, listing each of the domains. The editor role has CP access.
We’ve been going round and round on this with no resolution. Appreciate if anyone can point us at likely causes.
Many thanks Chris
Chris, Just to verify, are you on the latest version of EE (6.0.6)? There was a bug reported in 6.0.3 which matches what you’re describing ( https://github.com/ExpressionEngine/ExpressionEngine/issues/908 ) which was resolved in 6.0.4. thanks.
Ha! We are on 6.0.3. Thank you Andy I will upgrade and report back.
Strangely the version box in the bottom right says ‘Up to date’ at 6.0.3 and does not give and option to update.
Not resolved.
Updates all done to 6.0.6. I have edited all site admin, index files and the config file to the previous values. Sites are working and Admin can navigate CP ok.
However Editor can still only login into base site and gets ‘not authorised’ on others.
Not sure if its relevant although it does seem important. When saving the settings as Admin the attached image flashed briefly before the CP indicated a successful save.
I check the config.php file in the system files directory and it is set to:
$config[‘base_url’] = $config[‘site_url’];
and in each of the 3 individual site index.php files are set with their domains as follows:
$assign_to_config[‘site_url’] = ‘https://www.mysite1.com/’;
RESOLVED:
By the url I can see that the Editor was being directed to this URL which triggers the error.
https://www.mysite.com/admin.php?/cp/publish/edit&filter_by_channel=5
Manually changing the url to the following, successfully shows the CP and I can do this on all sites.
https://www.mysite.com/admin.php?/cp/homepage
So it would seem, at least after the upgrade anyway, to only be a straight page access issue.
Although I had set the channel access for Blog under the CP, they were no longer set under the channel ‘Permissions’ tab as well. I believe they were set before but perhaps not. So I cant tell for sure if it was the 6.0.3 bug or just me.
Ah. If this bug ( https://github.com/ExpressionEngine/ExpressionEngine/issues/1087 ) is what you’re referring to, that’s where I was going to go next. Essentially you could clear out permissions on other MSM sites when editing permissions on a different one.
glad to hear you figured it out.