You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@continuum.apache.org by "Olivier Lamy (JIRA)" <ji...@codehaus.org> on 2008/09/18 10:28:48 UTC

[jira] Closed: (CONTINUUM-1867) Project group admin should not be able to grant system-wide roles to himself

     [ http://jira.codehaus.org/browse/CONTINUUM-1867?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Olivier Lamy closed CONTINUUM-1867.
-----------------------------------

      Assignee: Olivier Lamy
    Resolution: Fixed

upgrade to redback 1.1.1 done in rev 696596
Thanks for the fast release :-)

> Project group admin should not be able to grant system-wide roles to himself
> ----------------------------------------------------------------------------
>
>                 Key: CONTINUUM-1867
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1867
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.2
>            Reporter: Wendy Smoak
>            Assignee: Olivier Lamy
>             Fix For: 1.2
>
>         Attachments: continuum-user-edit.pdf
>
>
> As a project group admin for a single group, I am able to edit my user account and grant any role up to and including system administrator.
> A project group admin should be able to grant the roles for his own project group to other users.  He should not be able to elevate his own permissions.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira