View Issue Details

IDProjectCategoryView StatusLast Update
13582Bug reports[All Projects] User/User groupspublic2018-05-23 13:09
Reportergabrieljenik Assigned ToLouisGac  
PrioritylowSeveritymajor 
Status assignedResolutionopen 
Product Version 
Target VersionFixed in Version 
Summary13582: Can't make a user to be able to only access his individal templates
Description

Looking forward to allow a user to only update a certain template.
As that:
1 - I give global permission on "templates" to "read", if not the template editor menu entry is not shown.
2 - Setup individual permissions on each template for that user.

When going to the template editor the dropdown list shows all templates available to be edited.

TagsNo tags attached.
Complete LimeSurvey version number (& build)2.7.x
I will donate to the project if issue is resolvedNo
Browser
Database & DB-Versionmysql
Server OS (if known)Linux
Webserver software & version (if known)Apache
PHP Version-

Activities

Mazi

Mazi

2018-04-09 18:07

partner   ~47373

Sounds like a rather serious security issue if anyone can see/edit any template!ß

DenisChenu

DenisChenu

2018-04-10 16:58

developer   ~47389

Last edited: 2018-04-10 17:03

View 4 revisions

For information in 2.6lts, tested only template editor. About template rights : only one checkbox for each templates

  • User have right on 2 templates, no global rights on templates : can not see Template Editor menu (didn't test if access is out too)
  • User have right on 2 templates, + read global rights on templates : can see all templates editor, can not save one (even the 2 checked in templates rights).

PS1 : Finally : template rights (single) is used only for "usage in survey" rights, not in template editor
PS2 : seem mùore a feature request : Single template is "READ(use)" rights, not CRUD rights

Issue History

Date Modified Username Field Change
2018-04-09 18:04 gabrieljenik New Issue
2018-04-09 18:05 gabrieljenik Description Updated View Revisions
2018-04-09 18:07 Mazi Note Added: 47373
2018-04-10 09:46 Mazi Assigned To => LouisGac
2018-04-10 09:46 Mazi Status new => assigned
2018-04-10 16:58 DenisChenu Note Added: 47389
2018-04-10 17:00 DenisChenu Note Edited: 47389 View Revisions
2018-04-10 17:03 DenisChenu Note Edited: 47389 View Revisions
2018-04-10 17:03 DenisChenu Note Edited: 47389 View Revisions
2018-05-23 13:09 LouisGac Priority none => low