View Issue Details

Related ChangesetsJump to NotesJump to History
This bug affects 1 person(s).
 10
IDProjectCategoryView StatusDate SubmittedLast Update
10875Bug reportsRemoteControlpublic2016-04-06 11:202018-09-28 14:12
ReporterDenisChenu Assigned ToDenisChenu  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version2.50.x 
Fixed in Version2.50.x 
Summary10875: Remote control list_surveys can list whole survey, and not only needed
Description

When using list survey : if user rps have Gloable settings survey rights : all survey is shown for all user

Steps To Reproduce

Create a RPS user with 'read all survey' right
Create a user with only one survey
Test JSON rpc list_survey for the test user : you see whole surveys

TagsNo tags attached.
Bug heat10
Complete LimeSurvey version number (& build)160406
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant

Relationships

Relationship GraphDependency Graph
has duplicate 10876 closedDenisChenu the list_survey API returns all surveys instead of only the one the user has rights to. 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2016-04-06 11:26

developer   ~37024

Fix committed to 2.06lts branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18346
DenisChenu

DenisChenu

2016-04-06 11:35

developer   ~37026

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=18347
c_schmitz

c_schmitz

2016-04-07 23:55

administrator   ~37111

Version 2.50 Build 160407 released
DenisChenu

DenisChenu

2018-09-28 14:12

developer   ~49182

Fix committed to 2.06lts branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=28077

Related Changesets

LimeSurvey: 2.06lts e462fa82

2016-04-06 09:26:04

DenisChenu

Details Diff 		Fixed issue 10875: Remote control list_surveys can list whole surveys, and not only needed
Dev: add $loginID for global permission too		 Affected Issues
10875
mod - application/models/Survey.php Diff File

LimeSurvey: master 7e276871

2016-04-06 09:35:29

DenisChenu

Details Diff 		Fixed issue 10875: Remote control list_surveys can list whole surveys, and not only needed
Dev: add $loginID for global permission too		 Affected Issues
10875
mod - application/models/Survey.php Diff File

LimeSurvey: 2.06lts d0c16302

2016-04-06 11:37:11

DenisChenu

Details Diff 		Fixed issue 10875: Remote control list_surveys can list whole surveys, and not only needed
Dev: add $loginID for global permission too		 Affected Issues
10875
mod - application/models/Survey.php Diff File

Issue History

Date Modified Username Field Change
2016-04-06 11:20 DenisChenu New Issue
2016-04-06 11:20 DenisChenu Status new => assigned
2016-04-06 11:20 DenisChenu Assigned To => DenisChenu
2016-04-06 11:26 DenisChenu Changeset attached => LimeSurvey 2.06lts e462fa82
2016-04-06 11:26 DenisChenu Note Added: 37024
2016-04-06 11:26 DenisChenu Resolution open => fixed
2016-04-06 11:35 DenisChenu Changeset attached => LimeSurvey master 7e276871
2016-04-06 11:35 DenisChenu Note Added: 37026
2016-04-06 11:38 DenisChenu Status assigned => resolved
2016-04-06 11:38 DenisChenu Fixed in Version => 2.5
2016-04-06 11:43 DenisChenu Relationship added has duplicate 10876
2016-04-07 23:55 c_schmitz Note Added: 37111
2016-04-07 23:55 c_schmitz Status resolved => closed
2018-09-28 14:12 DenisChenu Changeset attached => LimeSurvey 2.06lts d0c16302
2018-09-28 14:12 DenisChenu Note Added: 49182