Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

After upgrading to 3.0.2, users with view/admin permissions cannot view widgets posted externally #11527

Closed
bondjimbond opened this issue Mar 25, 2017 · 3 comments
Labels
worksforme The issue cannot be reproduced and things work as intended.

Comments

@bondjimbond
Copy link

After upgrade, users with View or Admin permissions on some sites (in my case, site ID 16) cannot view report widgets that have been posted on sites outside Piwik.

For example, I have given a user Admin permission for site ID 16, and anonymous users View permission. When they go to view reports (e.g. http://kora.kpu.ca/admin/reports/islandora_piwik_reports) they are redirected to a Piwik login screen - even when the Admin user is already logged in.

However, on another site (site ID 3) with same permission setting, both anonymous and admin users are fine - e.g. http://arcabc.ca/about/usage

Since discovering this problem, I've altered the permissions of both the admin user and anonymous user, in case permissions had been lost, but they are still unable to view widgets.

The admin user reports that she can view the dashboard, etc. just fine if she goes straight to my Piwik site.

@Findus23
Copy link
Member

On http://kora.kpu.ca/admin/reports/islandora_piwik_reports you are using

<h3>Islandora object pages</h3>
<div id="widgetIframe"><iframe width="100%" height="350" src="http://analytics.bceln.ca/index.php?module=Widgetize&action=iframe&widget=1&moduleToWidgetize=Actions&actionToWidgetize=getPageUrls&idSite=16&period=day&date=today&disableLink=1&widget=1&token_auth=9d571fe32e33608bbefe169b0d7b" scrolling="yes" frameborder="0" marginheight="0" marginwidth="0"></iframe></div>

while on http://arcabc.ca/about/usage you are using

<h4>Pageviews</h4>
<div id="widgetIframe"><iframe width="100%" height="350" src="http://analytics.bceln.ca/index.php?module=Widgetize&action=iframe&widget=1&moduleToWidgetize=Actions&actionToWidgetize=getPageUrls&idSite=3&period=day&date=yesterday&disableLink=1&widget=1" scrolling="yes" frameborder="0" marginheight="0" marginwidth="0"></iframe></div>

The difference (except for idSite and date) is that on the site that isn't working you are adding a token_auth. If I remove the token, it is working:

http://analytics.bceln.ca/index.php?module=Widgetize&action=iframe&widget=1&moduleToWidgetize=Actions&actionToWidgetize=getPageUrls&idSite=16&period=day&date=today&disableLink=1&widget=1

@bondjimbond
Copy link
Author

Hmm, thanks. I will test this answer. Will also flag for the creator of islandora_piwik to let him know this is a concern.

@bondjimbond
Copy link
Author

Sigh - apologies; it looks like the user made a mistake copying her API key. Never mind.

@mattab mattab added the worksforme The issue cannot be reproduced and things work as intended. label Apr 3, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
worksforme The issue cannot be reproduced and things work as intended.
Projects
None yet
Development

No branches or pull requests

3 participants