[Mapbender-users] Cannot change application security permissions after mapbender update

[Joel Blizzard]

In upgrading from Mapbender 3.2.3 to 3.2.5 I no longer have the ability to
adjust security settings on the applications I've created.

So if I go into an application, and go to the "Security" tab, if I try to
remove public access, or add a user to the list, or make any kind of change
to existing permissions for an application, when I click Save, I get an
internal 500 error.

When I look at my logs on the server, I see this error:

[php7:notice] [pid 4589] [client <IPaddress>:63695] PHP Notice:  Undefined
offset: 2 in
/var/www/mapbender/vendor/symfony/security-acl/Dbal/MutableAclProvider.php
on line 981

That is referring to this section of MutableAclProvider.php:
Line 981 is the one that says "$ace = $old[$i]"

private function updateOldFieldAceProperty($name, array $changes)
    {
        $currentIds = array();
        foreach ($changes[1] as $field => $new) {
            for ($i = 0, $c = count($new); $i < $c; ++$i) {
                $ace = $new[$i];

                if (null !== $ace->getId()) {
                    $currentIds[$ace->getId()] = true;
                }
            }
        }

        foreach ($changes[0] as $old) {
            for ($i = 0, $c = count($old); $i < $c; ++$i) {
                $ace = $old[$i];

                if (!isset($currentIds[$ace->getId()])) {

$this->connection->executeQuery($this->getDeleteAccessControlEntrySql($ace->getId()));
                    unset($this->loadedAces[$ace->getId()]);
                }
            }
        }
    }


Can anyone assist me in figuring out what's gone wrong here?

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/mapbender_users/attachments/20210614/5918172c/attachment.html>