Edgewall Software
Modify ↓

Opened 10 years ago

Closed 10 years ago

#12164 closed defect (fixed)

User with TRAC_ADMIN can't revoke an undefined permission they don't possess

Reported by: Ryan J Ollos Owned by: Ryan J Ollos
Priority: normal Milestone: 1.0.9
Component: admin/web Version:
Severity: normal Keywords:
Cc: Branch:
Release Notes:
API Changes:
Internal Changes:

Description

To reproduce:

  • Create user1 and assign the user TRAC_ADMIN.
  • Insert a undefined permission into the database, e.g. INVALID_PERM, and assign to user2.
  • Login as user and navigate to /admin/general/perm.

You'll find the following for user2:

Attachments (0)

Change History (2)

comment:1 by Ryan J Ollos, 10 years ago

Status: new → assigned

comment:2 by Ryan J Ollos, 10 years ago

Resolution: → fixed
Status: assigned → closed

Fixed in [14253], merged in [14255].

Modify Ticket

Change Properties
Set your email in Preferences
Action
as closed The owner will remain Ryan J Ollos.
The resolution will be deleted. Next status will be 'reopened'.
to The owner will be changed from Ryan J Ollos to the specified user.

Add Comment
E-mail address and name can be saved in the Preferences .
Attachments ↑ Description ↑
 
Note: See TracTickets for help on using tickets.