HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Using the `switch user` while being logged into facebook admin account

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#97329 (In Topic #19290)
Avatar

Well-settled

While using an admin account which has been linked to a facebook login, if you go ahead and use this feature and masquerade as another user.
It adds a link to that admin accounts facebook profile in the users profile area.

I am hoping it also does not also add the login to that account as well. I guess this should not happen at all should it?
Maybe I should not be adding facebook login to admin accounts at all, is that a problem?

Thanks Mark

Back to the top
 
Posted
Rating:
#97332
Avatar

(I'll assume you're running a recent version of the addon)

Are you certain about this?

Nobody else has reported this issue, I've used Facebook for admin logins before, and I've checked the code. The code actually applies SU after the Facebook code runs, and after the session is established - i.e. at the point of the Facebook code running it's looking at the actual logged in member, not a masqueraded login.

Is it possible you actually explicitly logged in as this member at some point? I think if you did, what you described would happen (and I'll document it now actually). Facebook Connect is aggressive, and once authorised against a site, will bind to any actual login you have open.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#97336
Avatar

Well-settled

Chris

I will have to check this again later on. 
I have the latest version of ocPortal and also the addon.
It "is" possible I could of logged in as this user previous with it being a test account, but I am certain of it adding the admin accounts Facebook profile in the profile area of that user.
I will try this later on in an account I know I have not logged in before as, but I guess what your saying is that it's not really possible unless logging into that account before where Facebook connect may link the account and add the Facebook icon in the profile area.

Thanks Mark
Back to the top
 
Posted
Rating:
#97346
Avatar

Well-settled

I tested this again, and your right Chris.
It seems to while using the user switch feature "appear" to add an icon linking to your admin accounts facebook (which made me think this stayed there), but it only seems to be while being in that account or the same browser.

This shows my Admin accounts facebook icon in the user I am masquerading




Opening up a fresh browser and viewing the profile it is no longer there, so it all works as it should I guess

Thanks Mark
Back to the top
 
Posted
Rating:
#97348
Avatar

Actually I wasn't right, this isn't what I was expecting. It turns out Facebook's code makes a poor assumption.

We try and generate a Facebook link from the activity syndication, if failing to find one from the login. However Facebook puts a precedence on the login cookie even if we explicitly tell it not to. The attached file does some juggling to try and workaround that. In addition we're checking from the activity syndication even there isn't one, which is silly on our part.

Attachment
sources_custom/hooks/systems/symbols/USER_FB_CONNECT.php
» Download: USER_FB_CONNECT.php (1.58 Kb, 133 downloads so far)


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#97353
Avatar

Well-settled

Thanks Chris

I will apply the fix and re-test later tonight

Thanks Mark
Back to the top
 
Posted
Rating:
#97367
Avatar

Well-settled

Applied the fix and this seems to work a treat, and no longer adds the admin accounts facebook icon in the users profile when viewing.

Thanks a lot

Mark
Back to the top
 
Posted
Rating:
#104540

Non-joined user

I wasn't paying attention and accidentally selected switch users and now I can't rid of it .  
Back to the top
 
Posted
Rating:
#104541
Avatar

Community saint

Carolyn said

I wasn't paying attention and accidentally selected switch users and now I can't rid of it .  

Look at the bottom of the page … it should say something like …
You are using the 'Switch user' feature to masquerade as XXX. Return to your normal administrative login.
… click anywhere after the word "Return"

 :thumbs:

Take my advice. I'm not using it!

View my working ocPortal site (version 9.x.x) at Anglo-Indian Portal
Back to the top
 
Posted
Rating:
#104542

Non-joined user

On the bottom of the page it says , sign up for Facebook  and need help?
Back to the top
 
Posted
Rating:
#104543

Non-joined user

Thanks Fletch
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: