View Issue Details

Related ChangesetsJump to NotesJump to History
This bug affects 1 person(s).
 12
IDProjectCategoryView StatusDate SubmittedLast Update
10322Bug reportsOtherpublic2016-02-06 14:372016-02-10 21:03
Reporterasshank Assigned ToLouisGac 
PrioritynormalSeveritytrivial 
Status closedResolutionfixed 
Product Version2.50.x 
Summary10322: Adminpage not reflecting permissions of user
Description

The new admin (home)page is made for superadmin.
Permissions are not worked out yet.
E.g.: a user with no right to create a survey is presented with the option to create. A user who has no permission to edit global settings is presented with an option to edit global sesttings. When you choose such an option it is unsure wat happend next (I gather the security is in place). For a user whithout a right to create is getting a unexpected result. In case of edit settings a blank page.

Steps To Reproduce

Login as a user with limited permissions

Additional Information

in github a made a pullrequest https://github.com/LimeSurvey/LimeSurvey/pull/432 on the welcome.php page. This was just to disable the popup to create a new survey when a user has no right to create.

Category (admin-)interface is not an option for this Report Detail, so I choose Other!

TagsNo tags attached.
Bug heat12
Complete LimeSurvey version number (& build)github #432
I will donate to the project if issue is resolvedNo
Browser
Database type & version253
Server OS (if known)unix
Webserver software & version (if known)apache
PHP Version5.5.3

Relationships

Relationship GraphDependency Graph
has duplicate 10357 closedLouisGac Permission "view/read survey" not respected 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2016-02-06 19:45

developer   ~34676

Thanks,

Your right : a lot of part to be fixed :)
LouisGac

LouisGac

2016-02-10 19:22

developer   ~34841

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=17305
LouisGac

LouisGac

2016-02-10 19:23

developer   ~34842

Ok, you won the price of longest bug to fix...
many commits to correct it.

I just related to this bug the last one :
https://github.com/LimeSurvey/LimeSurvey/commit/23517302932c387ba3122ba3d3229fadff4ac0e4
c_schmitz

c_schmitz

2016-02-10 21:03

administrator   ~34858

2.5 Build 160210 released

Related Changesets

LimeSurvey: master 23517302

2016-02-10 18:21:51

LouisGac

Details Diff 		Fixed issue 10322: Boxes permission system :feelsgood: Affected Issues
10322
mod - application/controllers/admin/homepagesettings.php Diff File

Issue History

Date Modified Username Field Change
2016-02-06 14:37 asshank New Issue
2016-02-06 19:45 DenisChenu Note Added: 34676
2016-02-07 20:38 c_schmitz Assigned To => LouisGac
2016-02-07 20:38 c_schmitz Status new => assigned
2016-02-08 19:55 LouisGac Status assigned => confirmed
2016-02-09 12:52 DenisChenu Relationship added has duplicate 10357
2016-02-10 19:22 LouisGac Changeset attached => LimeSurvey master 23517302
2016-02-10 19:22 LouisGac Note Added: 34841
2016-02-10 19:22 LouisGac Resolution open => fixed
2016-02-10 19:23 LouisGac Note Added: 34842
2016-02-10 19:23 LouisGac Status confirmed => resolved
2016-02-10 21:03 c_schmitz Note Added: 34858
2016-02-10 21:03 c_schmitz Status resolved => closed