View Issue Details

This bug affects 1 person(s).
 6
IDProjectCategoryView StatusLast Update
17140Bug reportsErgonomypublic2021-12-21 10:32
ReporterDenisChenu Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version4.4.7 
Summary17140: Access denied for super admin on outdated survey url
Description

When there are an outdated url : survey admlin show alert with « Access denied» even for super admin

It must be a 404 : not found

Steps To Reproduce

Create a survey
Open administration view in another tab (surveyAdministration/view?surveyid=187194)
Delete survey in primary tab
Reload administration view

Additional Information

It must be clearly a 404 here

TagsNo tags attached.
Attached Files
Bug heat6
Complete LimeSurvey version number (& build)4.4.10 github
I will donate to the project if issue is resolvedNo
Browser
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant

Users monitoring this issue

There are no users monitoring this issue.

Activities

c_schmitz

c_schmitz

2021-12-07 18:41

administrator   ~67739

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=33039

c_schmitz

c_schmitz

2021-12-07 18:42

administrator   ~67740

I like that it is ambiguous to keep people from guessing survey IDs.

DenisChenu

DenisChenu

2021-12-07 20:00

developer   ~67742

There are no security fix about send a redirect …

LimeBot

LimeBot

2021-12-21 10:32

administrator   ~67828

Fixed in Release 5.2.6+211213

Related Changesets

LimeSurvey: master b05ef2dc

2021-12-07 19:40

c_schmitz


Details Diff
Fixed issue 17140: Wrong message for Superadmin for outdated survey URL Affected Issues
17140
mod - application/controllers/SurveyAdministrationController.php Diff File

Issue History

Date Modified Username Field Change
2021-02-27 12:15 DenisChenu New Issue
2021-02-27 12:15 DenisChenu File Added: Capture d’écran du 2021-02-27 11-41-07.png
2021-12-07 18:41 c_schmitz Assigned To => c_schmitz
2021-12-07 18:41 c_schmitz Status new => assigned
2021-12-07 18:41 c_schmitz Changeset attached => LimeSurvey master b05ef2dc
2021-12-07 18:41 c_schmitz Note Added: 67739
2021-12-07 18:41 c_schmitz Bug heat 0 => 2
2021-12-07 18:41 c_schmitz Resolution open => fixed
2021-12-07 18:42 c_schmitz Status assigned => resolved
2021-12-07 18:42 c_schmitz Note Added: 67740
2021-12-07 20:00 DenisChenu Note Added: 67742
2021-12-07 20:00 DenisChenu Bug heat 2 => 4
2021-12-21 10:32 LimeBot Note Added: 67828
2021-12-21 10:32 LimeBot Status resolved => closed
2021-12-21 10:32 LimeBot Bug heat 4 => 6