View Issue Details

This bug affects 1 person(s).
 0
IDProjectCategoryView StatusLast Update
20042Bug reportsRemoteControlpublic2025-04-02 09:37
ReporterSESSOU Assigned To 
PrioritynoneSeverityminor 
Status newResolutionopen 
Product Version6.6.x 
Summary20042: list_users command returns wrong permissions (roles permissions are not taken into account).
Description

Using list_users remote control command returns wrong informations about permissions (roles permissions are not taken into account).

Steps To Reproduce

1- Create a 'Limited User' role, whose only 2 permissions are LDAP authentication (auth_ldap) and read permission on all questionnaires (surveys).
2- Create a local user account with the username 'test'. When selecting the initial permissions, press the cancel button (the only permission activated by default in the database is then auth_db).
3- Associate the 'Limited User' role to the 'test' user
4- Check the permissions associated with the user, via the administration web interface (see screenshot). All is OK here (see screen capture attached)
5- Execute list_users command from php (CLI mode) : $response=$lsJSONRPCClient->list_users($sessionKey,null,'test');
6- The permissions returned are not correct. Only the initial permissions have been taken into account and not the role permissions

Part of the permissions returned by the current list_users command :
...
[permissions] => Array
(
[0] => Array
(
[entity] => global
[permission] => auth_db
[read_p] => 1
...
)
)


Part of the permissions expected (taking into account the role permissions) :

[permissions] => Array
(
[0] => Array
(
[entity] => global
[permission] => auth_ldap
[read_p] => 1
...
)
[1] => Array
(
[entity] => global
[permission] => surveys
[read_p] => 1
...
)
)

Conclusion : the role(s) permissions are not take into account !!!

TagsNo tags attached.
Attached Files
Bug heat0
Complete LimeSurvey version number (& build)6.12.3+250331
I will donate to the project if issue is resolvedNo
BrowserNot relevant
Database type & versionPostgresql 15.12
Server OS (if known)Debian 12
Webserver software & version (if known)Apache 2.4.62
PHP VersionPHP 8.2

Users monitoring this issue

There are no users monitoring this issue.

Activities

Issue History

Date Modified Username Field Change
2025-04-02 09:37 SESSOU New Issue
2025-04-02 09:37 SESSOU File Added: Capture d’écran 2025-04-01 à 11.38.18.png