Support

Admin Tools

#37324 Lost access to updates on my joomla site

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
3.10.9
PHP version
7.4.27
Admin Tools version
6.0.5

Latest post by nicholas on Monday, 20 June 2022 08:44 CDT

Monday, 20 June 2022 04:01 CDT

LAMF

Hi,
Something new has occure that never before happened to me as a Joomla administrator. I have several sites but on one as I have logged in as Super User I no longer have access to the
"administrator/index.php?option=com_installer&view=update"
I get the error message "403 You don't have permission to view this resource"
Which means I can no longer do any updtes to plugins, components etc. I don't see any status for updates on the startpage either.
If I go in under Users/Manage I only see the Super User withiut any check box before the user name (Super user).

I am not sure if this is Admin Tools related or not but it is very strange.

I have tried to add a new Super User but it is not possible to assign new users the Super User group. See below attached screen shot.


How can I resolve this problem?
Thanks in advance for any kind of assistance.
/Micke

Monday, 20 June 2022 05:59 CDT

nicholas

Admin Tools does not prevent you from accessing the extension management / installation / update pages. We have not done that after Joomla 1.5 and back then we only had that feature because Joomla 1.5 had no access control. Since Joomla 1.6 we have removed this feature — so we're talking about well over 12 years now.

The screenshot says that you are a simple Administrator. As such, you cannot install or update extensions. This is an operation which requires Super User privileges. Joomla prevents you from accessing this page.

If you are just an Administrator you cannot make yourself or anybody else a Super User. Privilege escalation is not allowed in Joomla.

If you are a Super User you might want to go to Components, Admin Tools, Web Application Firewall, Configure WAF. Under Hardening Options set “Disable editing backend users' properties” to No, “Disable creating / editing backend users from the frontend” to No. Click on Save & Close. You can now assign other users to the Super User group.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Monday, 20 June 2022 06:55 CDT

LAMF

Ok then it feels like someone (a hacker?) has made an intrusion and set all users to simple Admins.

My user was a Super Admin of course since I am the one one who built the site and are normally updating and installing everything. This is for obvious resons not possible anymore.

I think that my only option is to go into the database and make myself a super user again... The option you are suggesting is not possible as I am no longer a super admin.

Thanks anyway for a fast reply.

Monday, 20 June 2022 07:08 CDT

LAMF

That did the trick!

I reset the super admin password and also  changed the Params settings from {} to  {"admin_style":"","admin_language":"","language":"","editor":"","timezone":""} and that did the trick.

BR

Micke

Monday, 20 June 2022 08:44 CDT

nicholas

You’re welcome :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!