[wp-hackers] Users losing permissions/not able to log in/out

[William P. Davis]

Hey guys, it turned out the users not being able to log in/out was a problem with our instance of varnish, so that's not a terrible concern anymore. (Sorry about the initial urgency — that was about the only thing I hadn't checked.)

As far as users having their permissions bumped, I'm going to wait to submit that one to trac, although I'm fairly certain it's a problem with MS. 

Thanks guys. Sorry again to have bothered y'all.  


Sent from my BlackBerry® wireless device

-----Original Message-----
From: Eric Mann <eric at eam.me>
Sender: wp-hackers-bounces at lists.automattic.com
Date: Mon, 8 Nov 2010 12:56:50 
To: <wp-hackers at lists.automattic.com>
Reply-To: wp-hackers at lists.automattic.com
Subject: Re: [wp-hackers] Users losing permissions/not able to log in/out

If this is, in face, a critical bug in core, you should absolutely submit it
to Trac.  But make sure you also include *steps that are required to
reproduce the problem*.  If it's an intermittent problem with no apparent
cause, we probably can't diagnose it any more quickly than you can.

If, on the other hand, this is a security concern (i.e. someone external to
the site can adjust the permissions of your users through some previously
unknown vulnerability) then report it privately to security at wordpress.org.

On Mon, Nov 8, 2010 at 12:46 PM, William Davis <will.davis at gmail.com> wrote:

> We recently came across a severe problem where users are being randomly
> bumped down to subscribers and now they are unable to log in or out. I've
> disabled all plugins that might affect any of those functions and am not
> having any luck. Any ideas/how much of a faux pas is it to submit a critical
> or blocker ticket in trac?
>
> Will
> _______________________________________________
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
> http://lists.automattic.com/mailman/listinfo/wp-hackers
>
_______________________________________________
wp-hackers mailing list
wp-hackers at lists.automattic.com
http://lists.automattic.com/mailman/listinfo/wp-hackers