View Issue Details

Related ChangesetsJump to NotesJump to History
This bug affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
12893Bug reportsUser / Groups / Rolespublic2017-11-10 18:292018-01-15 10:39
ReporterDenisChenu Assigned ToDenisChenu  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version2.7x.x 
Fixed in Version3.0.0-rc.x 
Summary12893: Super admin seems able to connect via LDAP even if not able
Description

The initial super admin seems to be allwed to login even if it's false

Steps To Reproduce

Activate LDAP AUth plugin without checking «Allow initial user to login via LDAP»
Look at your (if you are initial super admin) rights

Additional Information

Think Auth LDAP and Authwebserver can use bedorePermission event (the before super admin rights)

TagsNo tags attached.
Bug heat6
Complete LimeSurvey version number (& build)171110
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2017-11-17 18:31

developer   ~45104

https://github.com/LimeSurvey/LimeSurvey/pull/859/commits/1d0be4c3d7d6adc21b86033c4cb74cc8a93d8b38

user70560

2017-11-17 20:00

  ~45109

Fix committed to develop branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=24911
c_schmitz

c_schmitz

2018-01-15 10:39

administrator   ~45742

Version 3.0.3 released.

Related Changesets

LimeSurvey: develop 646e8bc3

2017-11-17 20:00:10

user70560


Committer: GitHub Details Diff 		Dev: Auth plugin and Permission (#859)

Fixed issue #12869: Auth plugin must have a Permission settings accessible via GUI
New feature : getGlobalBasePermissions event to create new global Permission
Dev: and use it for AuthLDAP and AuthDB
Dev: Fixed issue 12893 initial admin seems to be allowed to log in via LDAP
Dev: did we need disable login for superadmin via LDAP/WebServer ?
Dev: plugin can be extended now (since Permission list can be extended)		 Affected Issues
12869, 12893
mod - application/core/plugins/AuthLDAP/AuthLDAP.php Diff File
mod - application/core/plugins/Authwebserver/Authwebserver.php Diff File
mod - application/models/Permission.php Diff File
mod - application/views/admin/user/setuserpermissions.php Diff File

Issue History

Date Modified Username Field Change
2017-11-10 18:29 DenisChenu New Issue
2017-11-10 18:29 DenisChenu Status new => assigned
2017-11-10 18:29 DenisChenu Assigned To => DenisChenu
2017-11-17 18:31 DenisChenu Note Added: 45104
2017-11-17 20:00 user70560 Changeset attached => LimeSurvey develop 646e8bc3
2017-11-17 20:00 user70560 Note Added: 45109
2017-11-17 20:00 user70560 Assigned To DenisChenu => user70560
2017-11-17 20:00 user70560 Resolution open => fixed
2017-11-17 20:01 DenisChenu Assigned To user70560 => DenisChenu
2017-11-17 20:01 DenisChenu Status assigned => resolved
2017-11-17 20:01 DenisChenu Fixed in Version => 3.0.0-rc.x
2018-01-15 10:39 c_schmitz Note Added: 45742
2018-01-15 10:39 c_schmitz Status resolved => closed
2019-11-01 17:26 c_schmitz Category User/User groups => User / Groups / Roles