Opened 11 years ago
Closed 5 years ago
#41 closed defect (worksforme)
ACL permission abiguity
Reported by: | quinn | Owned by: | quinn |
---|---|---|---|
Priority: | minor | Milestone: | 2.1 |
Keywords: | Cc: |
Description
We need to test if ACL.inc.php has a problem with this:
ACL should warn if you add or edit an multiply-grouped ARO in such a way that the ARO's access to an ACO would be ambiguous. Is it up to the user to resolve the conflict?
- EDITORS > EDIT = allow
- INTERNS > EDIT = deny
If user23 is in both groups, which has prescience?
Change History (1)
comment:1 Changed 5 years ago by quinn
- Resolution set to worksforme
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
Nevermind, it's impossible to add an ARO to more than one parent.