View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 20443 | Bug reports | User / Groups / Roles | public | 2026-03-02 16:43 | 2026-03-02 16:43 |
| Reporter | Valentina | Assigned To | |||
| Priority | none | Severity | minor | ||
| Status | new | Resolution | open | ||
| Product Version | 6.16.x | ||||
| Summary | 20443: [Permission Bug] - User with full survey permissions and global "Create Survey" permission cannot copy surveys owned by others | ||||
| Description | In LimeSurvey 6.16.10, a user (Bob) is unable to copy a survey owned by another user (Alice), even if Bob has been granted full permissions on that specific survey and possesses the global "Create Survey" permission. The copy action remains disabled in the survey list selector. | ||||
| Steps To Reproduce | Steps to reproduceStep 1 Global Permissions: An administrator creates User Alice and User Bob, granting both of them the global 'Create' permission within the row: "Permission to create surveys (for which all permissions are automatically given) and view, update and delete surveys from other users". Step 2 Groups: Create a User Group containing User Alice and User Bob. Step 3 Survey Creation: Log in as Alice and create Survey X (Alice is the owner). Step 4 Local Permissions: As Alice, go to Survey X > Settings > Survey permissions. Add Bob and grant him all available permissions (Full access). See upload file AliceSetBobPermissions.png. Step 5 The Bug: Log in as Bob. On the dashboard/survey list, locate Survey X. Click the three dots (options) on the right side of the row. See upload file CopyFail.png. Expected resultThe "Copy" commands should be enabled and functional, as Bob has full permissions on the survey and the global right to create surveys. Actual resultThe copy commands are disabled/greyed out. Bob cannot duplicate the survey despite having explicit full access granted by the owner. Workaround / Database FixTo bypass this issue in the database, in the lime_permissions table, locate the row where:
The field "update_p" is set to 0 by default, even after the owner grants "Full Access" through the UI. Solution: Manually setting "update_p" to 1 for this record allows User Bob to successfully copy the survey. | ||||
| Tags | No tags attached. | ||||
| Attached Files | |||||
| Bug heat | 0 | ||||
| Complete LimeSurvey version number (& build) | LimeSurvey Community Edition Versione 6.16.10+260223 | ||||
| I will donate to the project if issue is resolved | No | ||||
| Browser | Chrome 145.0.7632.117, Firefox v148.0 | ||||
| Database type & version | MySQL 642 | ||||
| Server OS (if known) | Ubuntu22.04 | ||||
| Webserver software & version (if known) | |||||
| PHP Version | PHP 8.1 | ||||