View Issue Details

This bug affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
09571Bug reportsAuthenticationpublic2015-05-19 12:30
ReporterDenisChenu Assigned ToDenisChenu  
PrioritynormalSeverityminor 
Status closedResolutionfixed 
Product Version2.05+ 
Fixed in Version2.05+ 
Summary09571: Permission Survey : set to whole : no edit on another survey
Description

Setting user read whole survey don't give him access to read other user survey.

Steps To Reproduce

Create a new user
Give him whole access to survey (or whole global access except super-admin)
Connecting to this user : user don't have access to any survey.

Additional Information

It work in first 2.05, don't know since it's not working

TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)150310
I will donate to the project if issue is resolvedNo
Browsernot relevant
Database type & versionMysql 5
Server OS (if known)debian/linux
Webserver software & version (if known)apache
PHP VersionPHP Version 5.4.4

Relationships

related to 09605 closedDenisChenu Crash when trying to grant permission in specific survey to user without any global permission 
related to 09638 closedc_schmitz Non-Superadmins can see any survey (structure, token, data, etc.) without having permissions set 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2015-03-18 11:18

developer   ~31843

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15033

DenisChenu

DenisChenu

2015-03-18 15:03

developer   ~31845

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15034

DenisChenu

DenisChenu

2015-03-18 15:16

developer   ~31846

Reverted due to different system , but must find a beter way , then need more explanation on some Permission

Global Permission:
surveys/read : allow to read all survey : OK : can read whole survey (survey content, question etc ...)
surveys/update : can update whole surveys ? add question, group etc ? only update survey settings ?
surveys/delete : can delete whole surveys ?
surveys/create : allow to create survey

Hard to do it only on Permission ....

DenisChenu

DenisChenu

2015-03-18 15:58

developer   ~31847

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15036

DenisChenu

DenisChenu

2015-03-18 17:27

developer   ~31848

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15037

DenisChenu

DenisChenu

2015-03-18 17:30

developer   ~31849

Fixed for surveys/survey , usage of checkbox indeterminate for managing user rigth on survey (get the real survey rigth, and only after show the final survey rigths).

DenisChenu

DenisChenu

2015-03-19 18:01

developer   ~31867

Fix committed to 2.06 branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=15040

c_schmitz

c_schmitz

2015-05-08 09:16

administrator   ~32120

2.05+ Build 150508 released

Related Changesets

LimeSurvey: master c36267d0

2015-03-18 10:18:44

DenisChenu

Details Diff
Fixed issue 09571: Permission Survey : global Permission are not tested
Dev: for listing : minimum access to (surveys|templates)/read
Dev: Make a de report for other entity
Affected Issues
09571
mod - application/controllers/admin/surveyadmin.php Diff File
mod - application/helpers/common_helper.php Diff File
mod - application/models/Permission.php Diff File

LimeSurvey: master f74e006d

2015-03-18 14:02:03

DenisChenu

Details Diff
Revert "Fixed issue 09571: Permission Survey : global Permission are not tested"

This reverts commit c36267d0625f5caba4e6057c769b28b828161ba5.
Must review some behaviour
Affected Issues
09571
mod - application/controllers/admin/surveyadmin.php Diff File
mod - application/helpers/common_helper.php Diff File
mod - application/models/Permission.php Diff File

LimeSurvey: master 8c9123da

2015-03-18 14:58:46

DenisChenu

Details Diff
Dev: Fixed issue 09571: (Partial) Permission Survey global permission is not used
Dev: Actually just testing and delete is allowed by global setings
Affected Issues
09571
mod - application/controllers/admin/surveyadmin.php Diff File
mod - application/helpers/common_helper.php Diff File
mod - application/models/Permission.php Diff File
mod - application/models/Survey.php Diff File

LimeSurvey: master 5a859e5a

2015-03-18 16:27:39

DenisChenu

Details Diff
Dev: Fixed issue 09571: Usage of global Survey rigths
Dev: update allow uptdate of whole survey
Dev: view allow view on all surveys
Affected Issues
09571
mod - application/controllers/admin/surveypermission.php Diff File
mod - application/models/Permission.php Diff File

LimeSurvey: 2.06 ffa19534

2015-03-19 17:01:23

DenisChenu

Details Diff
Fixed issue 09571: Using global Survey rigths for final survey rigths Affected Issues
09571
mod - application/controllers/admin/surveyadmin.php Diff File
mod - application/controllers/admin/surveypermission.php Diff File
mod - application/helpers/common_helper.php Diff File
mod - application/models/Permission.php Diff File
mod - application/models/Survey.php Diff File
mod - scripts/admin/surveypermissions.js Diff File
mod - styles/adminstyle.css Diff File

Issue History

Date Modified Username Field Change
2015-03-18 08:33 DenisChenu New Issue
2015-03-18 08:33 DenisChenu Status new => assigned
2015-03-18 08:33 DenisChenu Assigned To => DenisChenu
2015-03-18 11:18 DenisChenu Changeset attached => LimeSurvey master c36267d0
2015-03-18 11:18 DenisChenu Note Added: 31843
2015-03-18 11:18 DenisChenu Resolution open => fixed
2015-03-18 15:03 DenisChenu Changeset attached => LimeSurvey master f74e006d
2015-03-18 15:03 DenisChenu Note Added: 31845
2015-03-18 15:16 DenisChenu Note Added: 31846
2015-03-18 15:58 DenisChenu Changeset attached => LimeSurvey master 8c9123da
2015-03-18 15:58 DenisChenu Note Added: 31847
2015-03-18 17:27 DenisChenu Changeset attached => LimeSurvey master 5a859e5a
2015-03-18 17:27 DenisChenu Note Added: 31848
2015-03-18 17:30 DenisChenu Note Added: 31849
2015-03-19 18:01 DenisChenu Changeset attached => LimeSurvey 2.06 ffa19534
2015-03-19 18:01 DenisChenu Note Added: 31867
2015-03-31 12:13 DenisChenu Status assigned => resolved
2015-03-31 12:13 DenisChenu Fixed in Version => 2.05+
2015-04-16 01:11 aesteban Relationship added related to 09605
2015-05-08 09:16 c_schmitz Note Added: 32120
2015-05-08 09:16 c_schmitz Status resolved => closed
2015-05-19 12:30 c_schmitz Relationship added related to 09638