View Issue Details

This bug affects 1 person(s).
 10
IDProjectCategoryView StatusLast Update
11287Bug reportsUser / Groups / Rolespublic2016-06-03 14:46
Reporterradhwaw Assigned ToLouisGac 
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version2.50.x 
Summary11287: Cannot Delete Users From User Groups Unless Having Superadministrator Permission
Description

The delete/remove icon is not shown in action column of the user group page unless we have superadministrator permission. I have tried to assign certain user (test) in having full user group permission but I still cannot remove the user from a user group because the trash icon is not visible.

Steps To Reproduce

1) Create Certain Administrator with "User Groups" permission but without "superadministrator" permission;
2) Login as the created Administrator in step 1);
3) Create a User Group;
4) Add a user in the created user group in step 3);
5) Try to remove the user from the user group (you cannot, because the delete icon is not shown)

TagsNo tags attached.
Attached Files
setpermission.png (78,668 bytes)   
setpermission.png (78,668 bytes)   
cannotdeletegroup.png (37,579 bytes)   
cannotdeletegroup.png (37,579 bytes)   
Bug heat10
Complete LimeSurvey version number (& build)160526
I will donate to the project if issue is resolvedNo
BrowserGoogle Chrome
Database type & versionMS SQL Server
Server OS (if known)Windows 7
Webserver software & version (if known)Apache 2.2.21
PHP Version5.3.8

Users monitoring this issue

radhwaw

Activities

DenisChenu

DenisChenu

2016-05-31 08:21

developer   ~39035

See usercontrolSameGroupPolicy
https://manual.limesurvey.org/Optional_settings#Security

radhwaw

radhwaw

2016-05-31 08:39

reporter   ~39036

As far as I understand, the optional settings usercontrolSameGroupPolicy regulate whether the operators can see only users they create or users that belongs to at least one same group. But it's not regulating whether the operators can remove users from the group they create. In this case, the operators want to remove specified users from certain group. When I try to logged in as Superadmin, I can see the remove action, but when I'm not logged in as Superadmin, even if I have permission to read, update, delete, import, and also export the user group, but I can't see the remove action. I assume that this is necessary that the operators can remove the user from the group they create. Otherwise, when the operators want to remove 1 user of 5 users/members in a certain group, the operators have to delete the group first and recreate the group and reinsert the 4 members.

LouisGac

LouisGac

2016-06-03 11:33

developer   ~39135

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=19312

c_schmitz

c_schmitz

2016-06-03 14:46

administrator   ~39183

Version 2.50 Build 160603 released

Related Changesets

LimeSurvey: master f7cb6e90

2016-06-03 09:33:32

LouisGac

Details Diff
Fixed issue 11287: Cannot Delete Users From User Groups Unless Having Superadministrator Permission Affected Issues
11287
mod - application/models/UserGroup.php Diff File
mod - application/views/admin/usergroup/usergroups_view.php Diff File

Issue History

Date Modified Username Field Change
2016-05-27 16:21 radhwaw New Issue
2016-05-27 16:21 radhwaw File Added: setpermission.png
2016-05-27 16:22 radhwaw File Added: cannotdeletegroup.png
2016-05-31 07:26 radhwaw Issue Monitored: radhwaw
2016-05-31 08:21 DenisChenu Note Added: 39035
2016-05-31 08:39 radhwaw Note Added: 39036
2016-06-03 11:24 LouisGac Sticky Issue No => Yes
2016-06-03 11:33 LouisGac Changeset attached => LimeSurvey master f7cb6e90
2016-06-03 11:33 LouisGac Note Added: 39135
2016-06-03 11:33 LouisGac Assigned To => LouisGac
2016-06-03 11:33 LouisGac Resolution open => fixed
2016-06-03 11:33 LouisGac Sticky Issue Yes => No
2016-06-03 11:33 LouisGac Status new => resolved
2016-06-03 14:46 c_schmitz Note Added: 39183
2016-06-03 14:46 c_schmitz Status resolved => closed
2019-11-01 17:26 c_schmitz Category User/User groups => User / Groups / Roles
2021-08-02 17:22 guest Bug heat 8 => 10