|
|
| Reporter | slansky | Assigned To | c_schmitz | |
|---|
| Priority | normal | Severity | minor | |
|---|
| Status | closed | Resolution | fixed | |
|---|
| Product Version | 2.00+ | |
|---|
| Fixed in Version | 2.00+ | |
|---|
This bug affects 1 person(s).
254
|
|
| Summary | 07652: User groups permissins - Access denied |
|---|
| Description | When setting survey permissions for a group LS throws "Access denied" error. |
|---|
| Steps To Reproduce |
- Create survey and group of users (Group id MUST NOT exist in Users table IDs!)
- In "Survey permissions" select "Groups" and "Add user group"
- Select "Set Survey Rights"
- Set permissions and "Save now"
- LS throws "Access denied"
|
|---|
| Additional Information | In the "surveypermission.php" file on line 569 (in version 20130305) is user group id checked whether it exists in user ids array (getUserList('onlyuidarray')). There should be check against user groups ids.
In the attachment is attached proposed patch. |
|---|
| Tags | No tags attached. |
|---|
| Attached Files |
surveypermission.php.patch (570 bytes)
Index: surveypermission.php
===================================================================
--- surveypermission.php (revision 230)
+++ surveypermission.php (working copy)
@@ -566,7 +566,7 @@
{
$this->getController()->error('Access denied');
}
- elseif( $postusergroupid && !in_array($postusergroupid,getUserList('onlyuidarray')))
+ elseif( $postusergroupid && !in_array($postusergroupid,getUserGroupList(null, 'simplegidarray')))
{
$this->getController()->error('Access denied');
}
|
|---|
|
|
| Bug heat | 254 |
|---|
| Complete LimeSurvey version number (& build) | 201303 |
|---|
| I will donate to the project if issue is resolved | No |
|---|
| Browser | |
|---|
| Database type & version | MySQL 5.5.24, MySQL 5.1.6 |
|---|
| Server OS (if known) | Windows 7, Linux (Debian) |
|---|
| Webserver software & version (if known) | Apache 2.2.22, Apache 2.2.16 |
|---|
| PHP Version | PHP 5.3.1, PHP 5.3.3 |
|---|
|
|
