Permissions for the frontend (for core as well!)

[web_services]

I do have a very problem regarding the rights for "public" users in the frontend. I want to display events (and registration access) in the front end and therefore have a menu item Events (com_civicrm » Event Listing). This menu is published and public. It has the link: index.php?option=com_civicrm&view=Events&layout=eventlisting&html=1&page=1

Now the problem, no unregistered "public" user can access this page 

I checked the joomla ACLs and for "public" and there are various settings regarding EVENTS: CiviEvent: access CiviEvent ; CiviEvent: edit event participants ; CiviEvent: edit all events ; CiviEvent: register for events; CiviEvent: view event info ; CiviEvent: view event participants  and CiviEvent: delete in CiviEvent

All of them are "inherited" and "NOT ALLOWED", and there is no way to change them to "ALLOWED" as an erroroccures on <save>: The most recent request was denied because it contained an invalid security token. Please refresh the page and try again. Of course this does not solve anything.

I received developer information (Bug Report) that this will be solved with civiCRM 4.6 ! However I need a work around for this, one to make civicrm things public... Or I have to find a temporary solution for Event listing and payment processing like  Event Booking by  Ossolution Team. This is very unsatisfying as the information then needs to be transferred manually to civiCRM.

Does anybody have a suggestion?

B ert

[Dave Greenberg]

Allowing PUBLIC (anonymous) visitors to View Event Information and Register for Events requires only these two CiviCRM permissions:
- CiviEvent: view event info ;
- CiviEvent: register for events;

The error on save for updated permissions sounds like you may just need to log out and log back in. OR you're site is misconfigured (possibly inconsistent settings for BASE URL - using www.mysite.com AND mysite.com in different spots.

I'm not familiar w/ the events listing URL you've referenced. AND not sure what Bug Report you're referring to - a link to the issue tracker would be helpful.

[web_services]

Thank you for your reply Dave,

login /logout does nothing good regarding this. Looking at the site URL it is http://samadhi-institute.org/... without www. That is the same URL is see configured within civicrm at:
Administer - > System Settings - > Resource URLs : http://samadhi-institute.org/administrator/components/com_civicrm/civicrm/

I have to mention I do have a htaccess installed at the http://samadhi-institute.org/administrator/  and it is in fact the htaccess user and password necessary to go ahead in the frontend.
I did nit recognize this first, because it seems firefox is caching this (access in the backend) and even not registered in the frontend it shows the event listing without hesitation.

For the mass mailing I had to open the: /html/samadhi_institute/administrator/components/com_civicrm/civicrm/extern with a htaccess: Satisfy Any

Now I assume the link http://samadhi-institute.org/index.php/en/events diggs someehere here:  /html/samadhi_institute/administrator/components/com_civicrm/...

But what directory to open? I want to keep the backend as save as possible.

And can this be related to the problem with changing joomla ACLs for civiCRM? From the backend I can change any other ACLs other than civiCRM's ?

Thanks again
B ert

[Dave Greenberg]

Sounds like the problems may be related to your htaccess configuration but I don't have expertise in that area.

[web_services]

Ok... I opened the admin.../com_civicrm temporary with htaccess: Satisfy Any, and it worked for the event listing and registration, however there is still no way to change the joomla ACLs so the ACL problem seems not connected to th htaccess. Error still: The most recent request was denied because it contained an invalid security token. Please refresh the page and try again.