View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 4
IDProjectCategoryView StatusDate SubmittedLast Update
19880Bug reportsOtherpublic2024-12-06 17:542026-10-26 17:22
ReporterDenisChenu Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status resolvedResolutionfixed 
Product Version6.6.x 
Summary19880: PermissionDeniedException and NotFoundException send 500 error
Description

The Exception in application/models/services/Exception send 500 error and not error related to the real issue

Steps To Reproduce

Steps to reproduce

Send a POST value to questionGroupsAdministration/delete with a survey activated and a real group
(you can update HTML of group menu for this)

Expected result

have a 403 error or a 400 error about deletion

Actual result

Have a 500 error

TagsNo tags attached.
Attached Files
Capture d’écran du 2024-12-06 17-50-10.png (115,541 bytes)
Bug heat4
Complete LimeSurvey version number (& build)6.8.2
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionnot relevant
Server OS (if known)not relevant
Webserver software & version (if known)not relevant
PHP Versionnot relevant
Git branch / Pull Request URLN/A

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2024-12-06 17:55

developer   ~81593

\Exception is done for server issue not form parameters or user issue.
https://github.com/LimeSurvey/LimeSurvey/blob/master/application/models/services/Exception.php

Then : must check it before (in contriller) or send HTML header
c_schmitz

c_schmitz

2026-10-26 17:22

administrator   ~86870

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=41082

Related Changesets

LimeSurvey: master a837f546

2026-10-26 17:22

c_schmitz


Details Diff		 Fixed issue 19880: Deleting a question group of an active survey or without delete permission showed a server error instead of an error message
Dev QuestionGroupsAdministrationController::actionDelete() now catches the service's PermissionDeniedException like the conditions refusal and returns the usual error message		 Affected Issues
19880
mod - application/controllers/QuestionGroupsAdministrationController.php Diff File
add - tests/unit/controllers/QuestionGroupDeleteRefusedTest.php Diff File

Issue History

Date Modified Username Field Change
2024-12-06 17:54 DenisChenu New Issue
2024-12-06 17:54 DenisChenu File Added: Capture d’écran du 2024-12-06 17-50-10.png
2024-12-06 17:55 DenisChenu Note Added: 81593
2024-12-06 17:55 DenisChenu Bug heat 0 => 2
2026-10-26 17:20 c_schmitz Assigned To => c_schmitz
2026-10-26 17:20 c_schmitz Status new => confirmed
2026-10-26 17:22 c_schmitz Changeset attached => LimeSurvey master a837f546
2026-10-26 17:22 c_schmitz Note Added: 86870
2026-10-26 17:22 c_schmitz Status confirmed => resolved
2026-10-26 17:22 c_schmitz Resolution open => fixed
2026-10-26 17:22 c_schmitz Bug heat 2 => 4