Opened 11 years ago

Closed 5 years ago

#41 closed defect (worksforme)

ACL permission abiguity

Reported by: quinn Owned by: quinn
Priority: minor Milestone: 2.1
Keywords: Cc:

Description

We need to test if ACL.inc.php has a problem with this:

ACL should warn if you add or edit an multiply-grouped ARO in such a way that the ARO's access to an ACO would be ambiguous. Is it up to the user to resolve the conflict?

  • EDITORS > EDIT = allow
  • INTERNS > EDIT = deny

If user23 is in both groups, which has prescience?

Change History (1)

comment:1 Changed 5 years ago by quinn

  • Resolution set to worksforme
  • Status changed from new to closed

Nevermind, it's impossible to add an ARO to more than one parent.

Note: See TracTickets for help on using tickets.