Herbert Maschke

try to add 'tablePrefix' => '', into your 'db' component

This looks like a bug in CAdvancedArBehavior for me. Need to investigate this. Thanks for reporting.

You can restrict it on action level: http://www.yiiframework.com/doc/api/1.1/CAccessRule#ips-detail There is no built-in functionality for this for yii-user-management atm. Any Implementation suggestions?

please also confirm if https://github.com/thyseus/yii-user-management/commit/6d620a2e0e53ca3cd7bae65b6d240514c88c44a4 fixes this problem, thank you

Thank you for reporting this severe security issue. I will investigate and fix this as soon as possible !

I was very busy at work today - i will look into this issue this evening. Of course you can contact me at irc or skype "herbertmaschke" ;)

Please check if this potential fix fixes the issue, thank you ! https://github.com/thyseus/yii-user-management/commit/a4a6970f9d561db37a5aed49ccf58f3ebcf7b6df

i can not reproduce this. Updating the profile works without changing the user table. Can you please elaborate when this error occurs? thank you.

did you extract the archive directly under the modules/ directory? it has to look like this: modules/user/... modules/role/.... can you show me config/main.php via a gist (without passwords), so i...

please place the 'cache' array under the 'components' array. not sure about the "alias user.UserModule is invalid." though....