View Issue Details

This issue affects 1 person(s).
 0
IDProjectCategoryView StatusLast Update
20443Bug reportsUser / Groups / Rolespublic2026-03-02 16:43
ReporterValentina Assigned To 
PrioritynoneSeverityminor 
Status newResolutionopen 
Product Version6.16.x 
Summary20443: [Permission Bug] - User with full survey permissions and global "Create Survey" permission cannot copy surveys owned by others
Description

In LimeSurvey 6.16.10, a user (Bob) is unable to copy a survey owned by another user (Alice), even if Bob has been granted full permissions on that specific survey and possesses the global "Create Survey" permission. The copy action remains disabled in the survey list selector.

Steps To Reproduce

Steps to reproduce

Step 1 Global Permissions: An administrator creates User Alice and User Bob, granting both of them the global 'Create' permission within the row: "Permission to create surveys (for which all permissions are automatically given) and view, update and delete surveys from other users".

Step 2 Groups: Create a User Group containing User Alice and User Bob.

Step 3 Survey Creation: Log in as Alice and create Survey X (Alice is the owner).

Step 4 Local Permissions: As Alice, go to Survey X > Settings > Survey permissions. Add Bob and grant him all available permissions (Full access). See upload file AliceSetBobPermissions.png.

Step 5 The Bug: Log in as Bob. On the dashboard/survey list, locate Survey X. Click the three dots (options) on the right side of the row. See upload file CopyFail.png.

Expected result

The "Copy" commands should be enabled and functional, as Bob has full permissions on the survey and the global right to create surveys.

Actual result

The copy commands are disabled/greyed out. Bob cannot duplicate the survey despite having explicit full access granted by the owner.

Workaround / Database Fix

To bypass this issue in the database, in the lime_permissions table, locate the row where:

  • entity_id = [Survey ID of Survey X]
  • uid = [User ID of Bob]
  • entity = 'survey'
  • permission = 'survey'

The field "update_p" is set to 0 by default, even after the owner grants "Full Access" through the UI.

Solution: Manually setting "update_p" to 1 for this record allows User Bob to successfully copy the survey.

TagsNo tags attached.
Attached Files
AliceSetBobPermissions.png (96,703 bytes)   
AliceSetBobPermissions.png (96,703 bytes)   
CopyFail.png (124,091 bytes)
Bug heat0
Complete LimeSurvey version number (& build)LimeSurvey Community Edition Versione 6.16.10+260223
I will donate to the project if issue is resolvedNo
BrowserChrome 145.0.7632.117, Firefox v148.0
Database type & versionMySQL 642
Server OS (if known)Ubuntu22.04
Webserver software & version (if known)
PHP VersionPHP 8.1

Users monitoring this issue

There are no users monitoring this issue.

Activities

Issue History

Date Modified Username Field Change
2026-03-02 16:43 Valentina New Issue
2026-03-02 16:43 Valentina File Added: AliceSetBobPermissions.png
2026-03-02 16:43 Valentina File Added: CopyFail.png