View Issue Details

Jump to NotesJump to History
This bug affects 1 person(s).
 0
IDProjectCategoryView StatusDate SubmittedLast Update
10876Bug reportsRemoteControlpublic2016-04-06 11:292016-04-06 11:43
Reporteraukevann Assigned ToDenisChenu  
PrioritynoneSeveritycrash 
Status closedResolutionduplicate 
Product Version2.06+ 
Summary10876: the list_survey API returns all surveys instead of only the one the user has rights to.
Description

This call:
$surveys = $myJSONRPCClient->list_surveys( $sessionKey, $surveyuser);

Should only return the list of surveys the $surveyuser has access rights to.
That is the way it works in LimeSurvey 2.05 and is described in the manual.

In LS 2.06 it returns all active surveys and does not filter out based on the $surveysuer permission.

Steps To Reproduce

Make a simple PHP script with the above function call and look at $surveys

Additional Information

Tested on Version 2.06+ SondagesPro Build 200315 - SondagesPro 1.0.7

TagsNo tags attached.
Bug heat0
Complete LimeSurvey version number (& build)2.06+, 200315
I will donate to the project if issue is resolvedYes
BrowserGoogle chrome and Firefox
Database type & versionMySQL
Server OS (if known)Linux
Webserver software & version (if known)Apache 2.0
PHP Version 5.4.45-1~dotdeb+7.1

Relationships

Relationship GraphDependency Graph
duplicate of 10875 closedDenisChenu Remote control list_surveys can list whole survey, and not only needed 

Users monitoring this issue

There are no users monitoring this issue.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2016-04-06 11:29 aukevann New Issue
2016-04-06 11:37 c_schmitz Assigned To => DenisChenu
2016-04-06 11:37 c_schmitz Status new => assigned
2016-04-06 11:43 DenisChenu Relationship added duplicate of 10875
2016-04-06 11:43 DenisChenu Status assigned => closed
2016-04-06 11:43 DenisChenu Resolution open => duplicate