View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 4
IDProjectCategoryView StatusDate SubmittedLast Update
06402Bug reportsSurvey participants (Tokens)public2012-07-29 15:302012-08-03 13:46
Reporterjcleeland Assigned Tojcleeland  
PriorityurgentSeverityminor 
Status closedResolutionfixed 
Product Version2.00RC7 
Fixed in Version2.00RC8 
Summary06402: Adding participants to a survey without selecting individual ones copies participants you don't own
Description

If you're logged in as a user who doesn't own or have access to all participants, and you do a search for participants, and then you choose to add "all" your participants in a screen to a survey, LimeSurvey copies ALL participants, even the ones you don't own or have rights over to the survey.

Steps To Reproduce

1) Log in as someone who doesn't have rights to all participants
2) Do a search so you can only see some participants (ie: firstname contains "a")
3) Don't check any boxes, but select 'Add to survey'
4) Add them to a survey, don't worry about mapping nay attributes
5) All the participants who match your search (even those you have no rights over) will be added to the survey

TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)201207
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMySQL
Server OS (if known)Windows
Webserver software & version (if known)ApacheII
PHP Version5

Users monitoring this issue

There are no users monitoring this issue.

Activities

jcleeland

jcleeland

2012-07-30 04:13

reporter   ~20064

Fix committed to Yii branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=9176
c_schmitz

c_schmitz

2012-08-03 13:46

administrator   ~20156

2.00RC8 released.

Related Changesets

LimeSurvey: Yii 7525cbda

2012-07-29 20:54

jcleeland


Details Diff		 Fixed issue 06402 adding participants to survey without selecting individual ones copies participants you don't own Affected Issues
06402
mod - application/controllers/admin/participantsaction.php Diff File
mod - application/models/Participants.php Diff File
mod - scripts/admin/displayParticipant.js Diff File

Issue History

Date Modified Username Field Change
2012-07-29 15:30 jcleeland New Issue
2012-07-29 15:30 jcleeland Status new => assigned
2012-07-29 15:30 jcleeland Assigned To => jcleeland
2012-07-29 15:33 jcleeland Description Updated
2012-07-29 15:33 jcleeland Steps to Reproduce Updated
2012-07-30 04:13 jcleeland Changeset attached => LimeSurvey Yii 7525cbda
2012-07-30 04:13 jcleeland Note Added: 20064
2012-07-30 04:13 jcleeland Resolution open => fixed
2012-07-30 04:14 jcleeland Status assigned => resolved
2012-08-03 13:45 c_schmitz Fixed in Version => 2.00RC8
2012-08-03 13:46 c_schmitz Note Added: 20156
2012-08-03 13:46 c_schmitz Status resolved => closed
2016-12-08 10:39 c_schmitz Category Tokens => Survey participants (Tokens)