View Issue Details

This issue affects 1 person(s).
 2
IDProjectCategoryView StatusLast Update
20443Bug reportsUser / Groups / Rolespublic2026-03-04 10:14
ReporterValentina Assigned Toc_schmitz  
PrioritynoneSeverityblock 
Status resolvedResolutionfixed 
Product Version6.16.x 
Summary20443: [Permission Bug] - User with full survey permissions and global "Create Survey" permission cannot copy surveys owned by others
Description

In LimeSurvey 6.16.10, a user (Bob) is unable to copy a survey owned by another user (Alice), even if Bob has been granted full permissions on that specific survey and possesses the global "Create Survey" permission. The copy action remains disabled in the survey list selector.

Steps To Reproduce

Steps to reproduce

Step 1 Global Permissions: An administrator creates User Alice and User Bob, granting both of them the global 'Create' permission within the row: "Permission to create surveys (for which all permissions are automatically given) and view, update and delete surveys from other users".

Step 2 Groups: Create a User Group containing User Alice and User Bob.

Step 3 Survey Creation: Log in as Alice and create Survey X (Alice is the owner).

Step 4 Local Permissions: As Alice, go to Survey X > Settings > Survey permissions. Add Bob and grant him all available permissions (Full access). See upload file AliceSetBobPermissions.png.

Step 5 The Bug: Log in as Bob. On the dashboard/survey list, locate Survey X. Click the three dots (options) on the right side of the row. See upload file CopyFail.png.

Expected result

The "Copy" commands should be enabled and functional, as Bob has full permissions on the survey and the global right to create surveys.

Actual result

The copy commands are disabled/greyed out. Bob cannot duplicate the survey despite having explicit full access granted by the owner.

Workaround / Database Fix

To bypass this issue in the database, in the lime_permissions table, locate the row where:

  • entity_id = [Survey ID of Survey X]
  • uid = [User ID of Bob]
  • entity = 'survey'
  • permission = 'survey'

The field "update_p" is set to 0 by default, even after the owner grants "Full Access" through the UI.

Solution: Manually setting "update_p" to 1 for this record allows User Bob to successfully copy the survey.

TagsNo tags attached.
Attached Files
AliceSetBobPermissions.png (96,703 bytes)   
AliceSetBobPermissions.png (96,703 bytes)   
CopyFail.png (124,091 bytes)
Bug heat2
Complete LimeSurvey version number (& build)LimeSurvey Community Edition Versione 6.16.10+260223
I will donate to the project if issue is resolvedNo
BrowserChrome 145.0.7632.117, Firefox v148.0
Database type & versionMySQL 642
Server OS (if known)Ubuntu22.04
Webserver software & version (if known)
PHP VersionPHP 8.1

Users monitoring this issue

There are no users monitoring this issue.

Activities

c_schmitz

c_schmitz

2026-03-04 10:14

administrator   ~84386

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=39385

Related Changesets

LimeSurvey: master b512af8f

2026-03-04 10:14

c_schmitz


Details Diff
Fixed issue 20443: User with all survey permissions and global "Create Survey" permission cannot copy surveys owned by others Affected Issues
20443
mod - application/models/Permission.php Diff File
mod - application/models/Survey.php Diff File

Issue History

Date Modified Username Field Change
2026-03-02 16:43 Valentina New Issue
2026-03-02 16:43 Valentina File Added: AliceSetBobPermissions.png
2026-03-02 16:43 Valentina File Added: CopyFail.png
2026-03-04 10:14 c_schmitz Changeset attached => LimeSurvey master b512af8f
2026-03-04 10:14 c_schmitz Note Added: 84386
2026-03-04 10:14 c_schmitz Assigned To => c_schmitz
2026-03-04 10:14 c_schmitz Status new => resolved
2026-03-04 10:14 c_schmitz Resolution open => fixed
2026-03-04 10:14 c_schmitz Bug heat 0 => 2
2026-03-04 10:14 c_schmitz Severity minor => block