View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 256
IDProjectCategoryView StatusDate SubmittedLast Update
09908Bug reportsSecuritypublic2015-09-22 20:432015-09-29 16:24
Reporterrubensqueiroz Assigned Toc_schmitz  
PriorityurgentSeveritypartial_block 
Status closedResolutionno change required 
Product Version2.06+ 
Summary09908: Any user can view, delete, edit any survey, even those that are not theirs
Description

I have recently upgraded to limesurvey version 2.06plus and I have noticed a significant change from the last version I used (1.91+). In the 2.06plus any user can view, delete, edit, in short, do anything they want to any of the surveys that are created in the system. In my opinion this is a very serious issue. I can even delete all the surveys at once, I need only select all of them and click on the trasbin.

Steps To Reproduce

All users can view all surveys and do whatever they want with them.

TagsNo tags attached.
Bug heat256
Complete LimeSurvey version number (& build)206plus
I will donate to the project if issue is resolvedNo
Browserany
Database type & versionMySQL, 5.5.22
Server OS (if known)CentOS 6.3
Webserver software & version (if known)Apache 2.2.29
PHP Version5.38
Git branch / Pull Request URL

Users monitoring this issue

duvemyster

Activities

DenisChenu

DenisChenu

2015-09-28 18:48

developer   ~33188

https://manual.limesurvey.org/Manage_users#Setting_global_permissions_for_a_user

What is the Permission of users : if the have Survey Permission edit/delete : it's the desired behaviour.
c_schmitz

c_schmitz

2015-09-29 16:24

administrator   ~33203

Not a bug, please check out the documentation.

Issue History

Date Modified Username Field Change
2015-09-22 20:43 rubensqueiroz New Issue
2015-09-22 21:21 duvemyster Issue Monitored: duvemyster
2015-09-28 18:48 DenisChenu Note Added: 33188
2015-09-29 16:24 c_schmitz Note Added: 33203
2015-09-29 16:24 c_schmitz Status new => closed
2015-09-29 16:24 c_schmitz Assigned To => c_schmitz
2015-09-29 16:24 c_schmitz Resolution open => no change required
2021-09-10 21:04 guest Bug heat 254 => 256