View Issue Details

IDProjectCategoryView StatusLast Update
14557Bug reportsUser / Groups / Rolespublic2019-03-08 11:31
ReporterMazi Assigned Tomarkusfluer 
Status assignedResolutionopen 
Product Version3.15.x 
Summary14557: User with very limited rights is allowed to set expiry date at survey list screen

A user who has no additional global rights and at survey level is only allowed to view quotas can pick a survey at the survey list and set the expiration date using the "mass action" drop down for selected surveys and selecting "Set expiry date".

Steps To Reproduce

Create a new user with no global rights.
Assign the user to a test survey and give rights to only view quotas.
Go to the survey list and select the survey.
Use the drop down bottom left (see screenshot) to set an expiry date.

TagsNo tags attached.
Complete LimeSurvey version number (& build)3.14.8+180829
I will donate to the project if issue is resolvedNo
Database & DB-VersionMySQL 5
Server OS (if known)Linux
Webserver software & version (if known)Apache 2
PHP Version7.2




2019-02-20 10:55


survey_expiration.png (19,882 bytes)   
survey_expiration.png (19,882 bytes)   
quota_rights.png (36,988 bytes)   
quota_rights.png (36,988 bytes)   


2019-02-21 14:40

developer   ~50661

Hope delete is OK ?

Did you test Survey theme too ?



2019-03-08 11:25

manager   ~50832

issue with the permissions system



2019-03-08 11:31

developer   ~50833

@cdorin : no : issue in MAssAction : it not testing Permission on surveys …

See : Permission is checked
But here : Permission not checked :

I think the best way is : using action for a single survey.

Issue History

Date Modified Username Field Change
2019-02-20 10:55 Mazi New Issue
2019-02-20 10:55 Mazi File Added: survey_expiration.png
2019-02-20 10:55 Mazi File Added: quota_rights.png
2019-02-21 14:40 DenisChenu Note Added: 50661
2019-03-08 11:25 cdorin Assigned To => markusfluer
2019-03-08 11:25 cdorin Status new => assigned
2019-03-08 11:25 cdorin Steps to Reproduce Updated View Revisions
2019-03-08 11:25 cdorin Note Added: 50832
2019-03-08 11:31 DenisChenu Note Added: 50833
2019-11-01 17:26 c_schmitz Category User/User groups => User / Groups / Roles