View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 12
IDProjectCategoryView StatusDate SubmittedLast Update
18508Bug reportsUser / Groups / Rolespublic2022-11-23 14:012026-10-31 13:21
Reporteruser364749Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status resolvedResolutionfixed 
Product Version5.4.x 
Summary18508: Unable to edit users even when has user-update permission.
Description

Creating a user and given them user-update permissions should allow them to edit other users but even with the user-update permission there is not edit button displayed.

Also, the delete button does not appear when the user has delete permissions. They are still able delete users via the dropdown action on the list page.

Steps To Reproduce

Steps to reproduce

Assuming a clean install with only one user (admin).

  • Login as admin
  • Create new user "UserA" and give them user-view and user-update permission.
  • Create new user "UserB".
  • Login as UserA and view the user list. You will see there are no button to edit UserB even though you have user-update permission.

Expected result

User list should show edit button for UserB.

Actual result

No edit button shown for UserB on user list.

TagsNo tags attached.
Attached Files
Screenshot 2022-11-23 at 12.58.59.png (121,128 bytes)
Bug heat12
Complete LimeSurvey version number (& build)5.4.12
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMySQL 5.7.39
Server OS (if known)Linux
Webserver software & version (if known)
PHP Version7.4.10
Git branch / Pull Request URLN/A

Relationships

Relationship GraphDependency Graph
has duplicate 18312 closed Non superadministrator cannot CRUD user permissions 

Users monitoring this issue

There are no users monitoring this issue.

Activities

gabrieljenik

gabrieljenik

2022-12-15 17:36

developer   ~73148

Same as 18468 ?
c_schmitz

c_schmitz

2026-10-31 12:22

administrator   ~87036

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=41187
c_schmitz

c_schmitz

2026-10-31 12:23

administrator   ~87037

This is intended: Users without the Superadministrator permission can only edit and delete the users they own, usually the ones they created. The manual describes it the same way. We changed the description of the Users permission to make this clearer.

Related Changesets

LimeSurvey: master d9939abf

2026-10-31 12:22

c_schmitz


Details Diff		 Fixed issue 18508: The description of the global Users permission did not say that editing and deleting a user only works for users you own Affected Issues
18508
mod - application/models/Permission.php Diff File

Issue History

Date Modified Username Field Change
2022-11-23 14:01 user364749 New Issue
2022-11-23 14:01 user364749 File Added: Screenshot 2022-11-23 at 12.58.59.png
2022-11-23 14:39 user364749 Description Updated
2022-12-02 21:51 gabrieljenik Status new => confirmed
2022-12-15 17:36 gabrieljenik Note Added: 73148
2022-12-15 17:36 gabrieljenik Bug heat 0 => 2
2026-10-31 12:22 c_schmitz Changeset attached => LimeSurvey master d9939abf
2026-10-31 12:22 c_schmitz Note Added: 87036
2026-10-31 12:22 c_schmitz Assigned To => c_schmitz
2026-10-31 12:22 c_schmitz Status confirmed => resolved
2026-10-31 12:22 c_schmitz Resolution open => fixed
2026-10-31 12:22 c_schmitz Bug heat 2 => 4
2026-10-31 12:23 c_schmitz Note Added: 87037
2026-10-31 13:21 c_schmitz Relationship added has duplicate 18312
2026-10-31 13:21 c_schmitz Bug heat 4 => 12