View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
18289 | Bug reports | User / Groups / Roles | public | 2022-07-27 18:15 | 2023-10-02 11:12 |
Reporter | DenisChenu | Assigned To | |||
Priority | none | Severity | partial_block | ||
Status | confirmed | Resolution | open | ||
Product Version | 5.3.x | ||||
Summary | 18289: User with group creation allowed can not see is own group | ||||
Description | If you set an user with Create user + create group can not see own group in Survey and SurveyGroup permission | ||||
Steps To Reproduce | Steps to reproduce
Expected resultSee the new Group created Actual resultNothing in list | ||||
Additional Information |
| ||||
Tags | No tags attached. | ||||
Bug heat | 12 | ||||
Complete LimeSurvey version number (& build) | 5.3.28 | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | not relevant | ||||
Database type & version | not relevant | ||||
Server OS (if known) | not relevant | ||||
Webserver software & version (if known) | not relevant | ||||
PHP Version | not relevant | ||||
parent of | 18281 | closed | tibor.pacalat | Users in group are not deleted |
related to | 18294 | closed | gabrieljenik | User can not see group created and user in group created |
The origin of this issue seems : current user was not set in Created group. In 3.X : if an user create a group : he was included in it. Now : it was not in group, and can add it himself in group … |
|
Confirm the origin of the issue. In 3.X : current user added (and can not delete himself via GUI) But we can easily fix to include owner_id for group + for user |
|
Work for getUserGroupList() function : https://github.com/LimeSurvey/LimeSurvey/blob/3682d8cdc75173957d1e2688c5f86fb3535cae34/application/helpers/common_helper.php#L4146 |
|
@gabrieljenik : you can not add owner_id to user list else you can give access to a group where user was removed from group in 3.X In 3.X
Update to 5.X now : no issue User 1 can NOT see UserGroupA but still see UserGroupB If you fix the owner_id system User 1 can see UserGroupA . Maybe reset the owner_id when update ? Since it's not used ? |
|
From what I read here, there 2 problems: Problem 1) Problem 2) I would work on #1 and then somehow show an alert ro superadmins on grups that are candidates #2. Thoughts? |
|
Problem : User with group creation allowed can not see is own group Reason :
It's NOT the problem … If you add owner_id to permission : this potentially BROKE current permission system. Potentially : some user can see forbidden user name … Then you need to update API version (5.5.0 to 6.0.0) if you add owner_id to manager UserGroup |
|
Like user : my opinion : remove the not really used Update and Delete permission
|
|
Date Modified | Username | Field | Change |
---|---|---|---|
2022-07-27 18:15 | DenisChenu | New Issue | |
2022-07-27 18:17 | DenisChenu | Note Added: 71199 | |
2022-07-27 18:17 | DenisChenu | Bug heat | 0 => 2 |
2022-07-27 18:19 | DenisChenu | Assigned To | => DenisChenu |
2022-07-27 18:19 | DenisChenu | Status | new => confirmed |
2022-07-27 18:19 | DenisChenu | Note Added: 71201 | |
2022-07-29 09:05 | DenisChenu | Assigned To | DenisChenu => |
2022-07-29 09:08 | DenisChenu | Note Added: 71239 | |
2022-07-29 10:16 | DenisChenu | Relationship added | related to 18294 |
2022-08-04 15:36 | gabrieljenik | Assigned To | => gabrieljenik |
2022-08-04 15:36 | gabrieljenik | Status | confirmed => assigned |
2022-08-04 15:36 | gabrieljenik | Severity | minor => partial_block |
2022-08-04 16:12 | DenisChenu | Note Added: 71326 | |
2022-08-22 21:08 | gabrieljenik | Note Added: 71514 | |
2022-08-22 21:08 | gabrieljenik | Bug heat | 2 => 4 |
2022-08-22 21:09 | gabrieljenik | Assigned To | gabrieljenik => |
2022-08-22 21:09 | gabrieljenik | Status | assigned => feedback |
2022-08-23 15:49 | DenisChenu | Relationship added | parent of 18281 |
2022-08-24 08:23 | DenisChenu | Note Added: 71523 | |
2022-08-24 08:23 | DenisChenu | Status | feedback => new |
2022-08-25 21:58 | gabrieljenik | Assigned To | => gabrieljenik |
2022-08-25 21:58 | gabrieljenik | Status | new => confirmed |
2022-08-25 21:58 | gabrieljenik | Assigned To | gabrieljenik => |
2022-09-01 13:27 | DenisChenu | Steps to Reproduce Updated | |
2022-09-01 13:27 | DenisChenu | Additional Information Updated | |
2023-05-22 15:34 | geraldC | Issue Monitored: geraldC | |
2023-05-22 15:34 | geraldC | Bug heat | 4 => 6 |
2023-05-22 15:35 | guest | Bug heat | 6 => 12 |
2023-10-02 11:12 | DenisChenu | Note Added: 77459 |