View Issue Details

This bug affects 1 person(s).
 254
IDProjectCategoryView StatusLast Update
09610Bug reportsSecuritypublic2015-04-22 10:00
Reporternwinter Assigned Toc_schmitz  
PrioritynormalSeverityminor 
Status closedResolutionduplicate 
Product Version2.05+ 
Summary09610: Users can see and edit all surveys
Description

Ordinary users without admin rights can see and edit all surveys that have been created by all users.

Steps To Reproduce

Log in to LS as an ordinary user and click the button to list all surveys.

Additional Information

Seems to have appeared with build 150413

TagsNo tags attached.
Bug heat254
Complete LimeSurvey version number (& build)150413
I will donate to the project if issue is resolvedNo
Browserany
Database type & versionirrelevant
Server OS (if known)irrelevant
Webserver software & version (if known)irrelevant
PHP Versionirrelevant

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2015-04-21 11:02

developer   ~32026

https://manual.limesurvey.org/Manage_users#Setting_global_permissions_for_a_user

 Surveys: This give the access to specific survey rigth. To allow a user to create and mange his survey, you need only to let the user to create survey. The creator of a survey is the owner of this survey : this give him all access to this survey. Remind each survey can have specific permission, the global persmision is readed before survey specific permission.
nwinter

nwinter

2015-04-21 20:18

reporter   ~32033

Ah, I see. My apologies for the erroneous bug report! (I believe that there may have been a bug in the past, because my users report that only after the recent update can they see all surveys. But either way, I have now fixed their permissions.)

DenisChenu

DenisChenu

2015-04-22 10:00

developer   ~32036

No problem :)

Issue History

Date Modified Username Field Change
2015-04-20 23:24 nwinter New Issue
2015-04-21 11:02 DenisChenu Note Added: 32026
2015-04-21 20:18 nwinter Note Added: 32033
2015-04-22 10:00 DenisChenu Note Added: 32036
2015-04-22 10:00 DenisChenu Status new => closed
2015-04-22 10:00 DenisChenu Assigned To => c_schmitz
2015-04-22 10:00 DenisChenu Resolution open => duplicate