View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
18968 | Bug reports | User / Groups / Roles | public | 2023-07-19 17:26 | 2023-10-16 08:55 |
Reporter | tibor.pacalat | Assigned To | tibor.pacalat | ||
Priority | none | Severity | partial_block | ||
Status | closed | Resolution | fixed | ||
Product Version | 6.1.x | ||||
Summary | 18968: User with "View/read Users" permission needs to have "User details" action available for all users, not just itself | ||||
Description | User with "View/read Users" permission needs to have "User details" action available for all users, not just itself | ||||
Steps To Reproduce | Steps to reproduce
Expected resultUser with "View/read Users" permission should have "User details" action enabled for all users. Actual resultUser with "View/read Users" permission has "User details" action enabled only for itself. | ||||
Tags | No tags attached. | ||||
Bug heat | 10 | ||||
Complete LimeSurvey version number (& build) | 6.1.5 | ||||
I will donate to the project if issue is resolved | No | ||||
Browser | |||||
Database type & version | . | ||||
Server OS (if known) | |||||
Webserver software & version (if known) | |||||
PHP Version | . | ||||
related to | 19166 | new | After the last upgrade, users with the permissions to manage users lost the user management options on the Action menu |
Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=35524 |
|
Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=35525 |
|
Fixed in Release 6.2.9+230925 |
|
Really related to all User permission … Code is OK, but logic still broken |
|
@gabrieljenik when I try to look at the details of superadmin I get 500 http://ls-ce-5x/index.php/userManagement/viewUser?userid=1 <h1>PHP Error [500]</h1> Trying to access array offset on value of type null (/var/www/ls-ce-5x/public/application/views/userManagement/partial/showuser.php:16) #0 /var/www/ls-ce-5x/public/vendor/yiisoft/yii/framework/base/CErrorHandler.php(133): CErrorHandler->handleError() |
|
That file is not updated by the patch. It may come from somewhere else. |
|
That has been like that for 4 years. Maybe something else done somehwere else impacted on this screen. Try changin that line (16) as this in order to be able to test tis ticket and woraournd it: |
|
Yeah, this fixes the issue. I think we can leave it like that since I don't know which other views use this partial and it only occurs with debug=2. |
|
Fix committed to 5.x branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=35611 |
|
Tested and merged. |
|
Need to be reported , usnure if we need to fix $oUser->getParentUser to alway return some value (empty string) or not ? Edit : https://github.com/LimeSurvey/LimeSurvey/blob/master/application/models/User.php#L647 |
|
Maybe just a new method parentName() ? |
|
We already have it : https://github.com/LimeSurvey/LimeSurvey/blob/master/application/models/User.php#L647 |
|
Fixed in Release 5.6.41+231017 |
|
LimeSurvey: master c7ef1061 2023-09-21 16:47 Gabriel Jenik Committer: GitHub Details Diff |
Fixed issue 18968: User with "View/read Users" permission needs to have "User details" action available for all users, not just itself (#3475) Co-authored-by: Lapiu Dev <devgit@lapiu.biz> |
Affected Issues 18968 |
|
mod - application/models/User.php | Diff File | ||
LimeSurvey: master c7ef1061 2023-09-21 16:47 Gabriel Jenik Committer: GitHub Details Diff |
Fixed issue 18968: User with "View/read Users" permission needs to have "User details" action available for all users, not just itself (#3475) Co-authored-by: Lapiu Dev <devgit@lapiu.biz> |
Affected Issues 18968 |
|
mod - application/models/User.php | Diff File | ||
LimeSurvey: 5.x 672f2b8c 2023-10-12 17:31 Gabriel Jenik Committer: GitHub Details Diff |
Fixed issue 18968: User with "View/read Users" permission needs to have "User details" action available for all users, not just itself (03528) Co-authored-by: Lapiu Dev <devgit@lapiu.biz> |
Affected Issues 18968 |
|
mod - application/models/User.php | Diff File |
Date Modified | Username | Field | Change |
---|---|---|---|
2023-07-19 17:26 | tibor.pacalat | New Issue | |
2023-09-14 14:37 | gabrieljenik | Assigned To | => gabrieljenik |
2023-09-14 14:37 | gabrieljenik | Status | new => assigned |
2023-09-20 18:00 | gabrieljenik | Severity | minor => partial_block |
2023-09-20 18:01 | gabrieljenik | Assigned To | gabrieljenik => DenisChenu |
2023-09-20 18:01 | gabrieljenik | Status | assigned => ready for code review |
2023-09-20 18:01 | gabrieljenik | Note Added: 77209 | |
2023-09-20 18:01 | gabrieljenik | Bug heat | 0 => 2 |
2023-09-20 22:01 | gabrieljenik | Assigned To | DenisChenu => tibor.pacalat |
2023-09-20 22:01 | gabrieljenik | Status | ready for code review => ready for testing |
2023-09-21 14:47 | tibor.pacalat | Status | ready for testing => resolved |
2023-09-21 14:47 | tibor.pacalat | Resolution | open => fixed |
2023-09-21 15:23 | Changeset attached | => LimeSurvey master c7ef1061 | |
2023-09-21 15:23 | Changeset attached | => LimeSurvey master c7ef1061 | |
2023-09-21 15:23 | guest | Note Added: 77219 | |
2023-09-21 15:23 | guest | Note Added: 77220 | |
2023-09-21 15:23 | guest | Bug heat | 2 => 4 |
2023-09-21 15:23 | guest | Bug heat | 2 => 4 |
2023-09-25 10:55 | LimeBot | Note Added: 77302 | |
2023-09-25 10:55 | LimeBot | Status | resolved => closed |
2023-09-25 10:55 | LimeBot | Bug heat | 4 => 6 |
2023-10-11 01:01 | gabrieljenik | Assigned To | tibor.pacalat => DenisChenu |
2023-10-11 01:01 | gabrieljenik | Status | closed => ready for code review |
2023-10-11 01:01 | gabrieljenik | Note Added: 77615 | |
2023-10-12 11:11 | DenisChenu | Relationship added | related to 19166 |
2023-10-12 11:16 | DenisChenu | Note Added: 77656 | |
2023-10-12 11:16 | DenisChenu | Bug heat | 6 => 8 |
2023-10-12 11:16 | DenisChenu | Assigned To | DenisChenu => tibor.pacalat |
2023-10-12 11:16 | DenisChenu | Status | ready for code review => ready for testing |
2023-10-12 14:48 | tibor.pacalat | Note Added: 77666 | |
2023-10-12 14:48 | tibor.pacalat | Bug heat | 8 => 10 |
2023-10-12 15:15 | gabrieljenik | Note Added: 77670 | |
2023-10-12 15:19 | gabrieljenik | Note Added: 77671 | |
2023-10-12 15:31 | tibor.pacalat | Note Added: 77672 | |
2023-10-12 15:31 | Changeset attached | => LimeSurvey 5.x 672f2b8c | |
2023-10-12 15:31 | guest | Note Added: 77673 | |
2023-10-12 15:32 | tibor.pacalat | Status | ready for testing => resolved |
2023-10-12 15:32 | tibor.pacalat | Note Added: 77675 | |
2023-10-12 17:33 | DenisChenu | Note Added: 77679 | |
2023-10-12 17:34 | DenisChenu | Note Edited: 77679 | |
2023-10-12 19:11 | gabrieljenik | Note Added: 77680 | |
2023-10-13 08:49 | DenisChenu | Note Added: 77687 | |
2023-10-16 08:55 | LimeBot | Note Added: 77728 | |
2023-10-16 08:55 | LimeBot | Status | resolved => closed |