Joomla admin account was removed by VM2 (Bravo !!!)

[biowan]

Hi,

VM2 version : 2.0.20b
As I asked a few question in the forum, I tried to configured a shopper account to manage orders. Because only my Joomla admin account can view orders and no one other account.

So, I tried to change the user account in "Shop > Shop", tab Additional information. I added in Shopper information :
Display name : Shop Manager
Username : manager
Password : xxxxx
Confirm password : xxxxx

Click on button "Save & Close"
--> Result, Joomla ejected my administrator session. 

I tried more times to authenticate in the system, no way. So I decided to check directly in Joomla DB. SO GOOD !!! YEAH !  my Joomla admin account is removed by VM2 ! Too nice !!!!

[Milbo]

Since no one happened this the last year. Please consider you did maybe really strange thing.

Please explain more closely. You cannot add "displayed name". When you click on shop and see the vendor tabe there should be already the data of the main admin.

[biowan]

Maybe I'm the first one to meet that and to be surprised. Maybe I'm alone to get order management to a non-admin user ? Or maybe I'm the first who reports this bug and nobody want to do it ? 

I don't know how I can explain more closely. I get the instructions that I did.
Sure, there is already data of the main admin. This was the reason that I tried to change to another user.

You cannot add "displayed name"

False, it's possible. All field in Shopper information are editable and mandatory. Maybe you confused with another component.

When the admin account was delete, the #__user_usergroup_map table in DB which is assigned the admin account to admin group was delete too. For me, there is a problem with the user object manipulation via API. In Joomla or in VM2, who knows it ? Probably there is a bug to "remove" the user account, not the link between shopper account and the shop.

Just know that I didn't change any code in the VM2. All scripts and codes are the original of the VM2 system, same for the Joomla system. The only thing that I customized myself was the website template. And there is no user account manipulation.


[attachment cleanup by admin]

[Milbo]

Yepp,

but this fields should be filled with the data of the person who installed the shop. We treat the installing person as the shopowner. You can change this using the tools. On the second tab there is a command for it.

[biowan]

but this fields should be filled with the data of the person who installed the shop.

It means the user account must be a super administrator, because only a user in super admin group can install component.

You can change this using the tools. On the second tab there is a command for it.

The second tab ? I don't think I understand what you said   . Because  Shop > Shop > tab Additional information is the second tab, the attachment image is on the Additional information tab.

All the ways, there is a problem with this "Shopper information" section. The Joomla admin account is deleted with this form. That I did a correct operation or not, the form get problem and suppress an Joomla account, instead of replace an account.

I just report it, if VM think this isn't a bug, no problem for me. Hope nobody will lost their admin account in prod ! Happy that my shop is still in configuration status and not accessible yet.

Thanks for your messages.

[Milbo]

the second tab in tools. I wonder still how you did it. Looks like you installed as user a,... then you deleted user a in the joomla menue, and used a new user b,... the you entered the store info filled the stuff again and stored it. Maybe something like this