Drupal - Can't enable Access Controls

[InfoTech-Solutions]

Hi,


1) Domain Name: infotech-solutions.co.uk

2) Server Name and IP address: typhoon 91.186.0.4

3) Description of problem:

I am using drupal for my website hosting and want to set up groups. I have added the Organic Groups (OG) module but I can not enable Access Control; when I try it just redirects me to my homepage.

4) Anything you might have done which may have caused the problem:

5) Anything you have done already, to try and resolve the problem:

I have tried all the solutions suggested by Drupal support (rebuilding content access permissions (node_access table) and disabling all modules that are not required), but I think this is a hosting issue.

I am lost! I have even tried installing a fresh instance of drupal and the modules required but I still get the same problem.

6) Any additional information you think is relevant:

Enabling OG access controls requires drupal to drop a row from the node_access table. Does eUKhost prevent drupal from doing this?


Any help will be much appreciated.

Kind regards,

Tim

[jc8654]

This might be a mod_security issue but I don't feel I'm qualified to say this..... You could try adding the relevant parts to your .htaccess file....

[InfoTech-Solutions]

It seems to be a hosting issue or the way I have my hosting set up.

A friend using drupal hosted by someone else and I have tried setting up OG on her web site hosting and it all works without a hitch, no htacess modifications required.

I suspect it is because my website hosting is not installed on the public_html root folder. I have a domain name pointing at a subfolder. I will investigate further and let you know.

[eukjason]

Originally Posted by InfoTech-Solutions

Hi,


1) Domain Name: infotech-solutions.co.uk

2) Server Name and IP address: typhoon 91.186.0.4

3) Description of problem:

I am using drupal for my website hosting and want to set up groups. I have added the Organic Groups (OG) module but I can not enable Access Control; when I try it just redirects me to my homepage.

4) Anything you might have done which may have caused the problem:

5) Anything you have done already, to try and resolve the problem:

I have tried all the solutions suggested by Drupal support (rebuilding content access permissions (node_access table) and disabling all modules that are not required), but I think this is a hosting issue.

I am lost! I have even tried installing a fresh instance of drupal and the modules required but I still get the same problem.

6) Any additional information you think is relevant:

Enabling OG access controls requires drupal to drop a row from the node_access table. Does eUKhost prevent drupal from doing this?


Any help will be much appreciated.

Kind regards,

Tim

Tim,

Give it a try now. If the problem still persist then open a ticket by providing the logins for druple and the exact steps to reproduce that error.

[InfoTech-Solutions]

Still no joy so I've opened a ticket.

Incidentially, installing drupal on the root of the main domain didn't work either.

Thanks

Tim

[NickJ]

Originally Posted by InfoTech-Solutions

Still no joy so I've opened a ticket.

Incidentially, installing drupal on the root of the main domain didn't work either.

Thanks

Tim

Hello,

It was due to mod_security rule set on server.

We understand that these changes will certainly affect your web site hosting administration in one way or another. However, our top priority here is to protect our servers and data.

You can check the exact message here:
--------
[Wed Nov 7 23:40:41 2007] [error] [client 86.142.111.17] mod_security: Access denied with redirect to [/]. Pattern match "<(.|\\\\n)+>" at POST_PAYLOAD [id "XSS_Check"] [severity "EMERGENCY"] [hostname "infotech-solutions.co.uk"] [uri "/admin/og/og"]
[Wed Nov 7 23:45:40 2007] [error] [client 86.142.111.17] mod_security: Access denied with redirect to [/]. Pattern match "<(.|\\\\n)+>" at POST_PAYLOAD [id "XSS_Check"] [severity "EMERGENCY"] [hostname "infotech-solutions.co.uk"] [uri "/admin/og/og"]
---------
The rule "SecFilter <(.|\\\\n)+>" is added under mod_security to prevent server from web attacks such as iframe injection or XSS attack(HTML/Javascript injection) and its not possible to remove this rule from mod_sec rule set.
I have excluded your domain from mod_security restriction.

Also, I have enabled the "Access Control" under your Organic Groups Configuration.

[InfoTech-Solutions]

All seems to work now, many thanks indeed for sorting it out so quickly.

Tim

[eUK-Nick]

It was completely our pleasure. We are always here to help out.