View Issue Details

IDProjectCategoryView StatusLast Update
12583Bug reports[All Projects] Data Entry (non public)public2017-08-09 12:45
ReporterMaziAssigned ToLouisGac 
PrioritynoneSeveritymajor 
Status assignedResolutionopen 
Product Version2.67.x 
Target VersionFixed in Version 
Summary12583: Users not allowed to edit data sets can edit data
DescriptionIf I create a Limesurvey admin user who is only allowed to view and enter data sets for a certain survey (see attached screenshot for settings), there is still a way to edit a data set by viewing the data sets and clicking the "Edit this data set" button on the new screen.
Steps To Reproduce1. Create a Limesurvey user.
2. For any test survey assign the user only the rights to view and enter data sets.
3. Log in with the new user, go to the response overview and click the icon to view a certain data set.
4. At the "View data set" screen there is a button on top "Edit this data set".
5. When clicking that button you can change existing data and save even though you do not have the proper user rights.
TagsNo tags attached.
Complete LimeSurvey version number (& build)Version 2.67.1+170626
I will donate to the project if issue is resolvedNo
BrowserChrome
Database & DB-VersionMySQL 5.5
Operating System (Server)Ubuntu 14 TLS
Webserver software & versionApache 2.0
PHP Version5.5.9

Activities

Mazi

2017-08-09 12:44

developer  

3_edit_data_set.png (33,344 bytes)
3_edit_data_set.png (33,344 bytes)
2_response_overview.png (62,745 bytes)
2_response_overview.png (62,745 bytes)
1_user_rights.png (47,262 bytes)
1_user_rights.png (47,262 bytes)

Mazi

2017-08-09 12:45

developer   ~44285

@LouisGac: I had already shown the issue to Carsten on Skype and he asked to create this ticket and assign it to you.
Let me know if you need any further details.

Issue History

Date Modified Username Field Change
2017-08-09 12:44 Mazi New Issue
2017-08-09 12:44 Mazi Status new => assigned
2017-08-09 12:44 Mazi Assigned To => LouisGac
2017-08-09 12:44 Mazi File Added: 1_user_rights.png
2017-08-09 12:44 Mazi File Added: 2_response_overview.png
2017-08-09 12:44 Mazi File Added: 3_edit_data_set.png
2017-08-09 12:45 Mazi Note Added: 44285