fwiw i can't replicate this on a vanilla 2.5 set up. Only in my upgraded (from 2.3) environment

When I try to change a user's group membership though the group membership box (as opposed to the "legacy" Access Level dropdown) I get this in my newly upgraded 2.5
Your browser did not sent a valid HTTP-Referrer string. This may have either been caused by a misconfigured browser/proxy or by a ...

Autofill was already a problem in 2.3, but it's worse in 2.5

Now when I create a new post, the "subtitle" gets auto-filled with a username (puzzlingly, not always mine, but that's just browser stupidity, I guess) and the password field gets auto-filled with that username's password.

It's not so ...

While I'm trying to understand this...

there's a message at the bottom of the screen that says:

If the option "Plugin ACL for usergroups" is enabled in the configuration, you can specify which usergroups are allowed to execute certain plugins/events.

Is that a requirement for what I'm trying to ...

But the system is working as if the legacy access is the operational control. According to the user group system, my new userid is a member of all three groups, including Admin, exactly what I don't want. And there is no way to remove those groups from the userid. But the Access setting of "Editor ...

b.) it turns out that it looks worse, but actually clearing the password field before saving still works. In 2.3 the autofill didn't refill the password field after save; now it does. Can I suggest you either: 1.) make this a configuration option so if we don't want it, it doesn't appear on the form ...

I can move this if it's better placed elsewhere:

2 issues have surfaced post upgrade;

a.) The "author" actually posted on the blog header is not the author set anywhere on the actual blog post form. (Curiously, it is the name of the last user I created, but I'm not signed in as that)

b.) the ...

OK, successful upgrade. Vote of thanks to the person/people who wrote the plugin.

Perhaps I'm misreading the interface; it seems very odd to me to have a user having "group membership" in all groups, and "access" to only one group. Surely if they have access to only one group, that's the only group ...

That's right, nothing actually "selects" from that box & no other selectors appear.

This is Serendipity 2.3.4

I also noticed that the installation fails the integrity test with:

include/tpl/config_local.inc.php corrupt or modified: failed verification

I'll start reading up on the update process ...

Thanks for this.

Can I just use "uploads/newrss.png" for the URL? I guess I can play around and work it out

Cheers

See attached screenshot.

If I save from here, there will be no change. And there is no option to choose, other than the highlight, to suggest what needs to be done. As a broad proposition, highlight means focus and action is nominated elsewhere... It would be possible for highlight to mean select ...

Reading a bit further, it appears the "access level" is only for backward compatibility, which explains why it's not working.

But although I can highlight the user's groups in the Group Membership list, there doesn't seem to be an option to remove them. Nor, in the Group admin section, can I remove ...

There's mention in the documentation of being able to use your own icon for the RSS feeds, but so far (the plugin *is* enabled) I haven't worked out how to actually do it. Can anyone help?

I created a user and allocated them an access level of "editor", but I can't work out how to remove them from the admin or super-editor groups, neither in the user nor the group management menus.

I had hoped that the access level option would control things, but the user I created is happily ...

I guess you have "autofill = user" on the subtitle field, but, I absolutely understand there's diminishing returns in trying to control browser behaviour...