Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fixing authorization issues on user and group page #133

Closed
giosakti opened this issue Dec 16, 2018 · 1 comment
Closed

Fixing authorization issues on user and group page #133

giosakti opened this issue Dec 16, 2018 · 1 comment
Assignees
@giosakti

Comments

@giosakti
Copy link
Contributor

There are issues in some pages where people without privileges can see the button for doing privileged actions:

  1. In user profile page, normal user can see the button to regenerate token for anybody
  2. In user profile page, normal user can see the button to update public key for anybody
  3. In group page, group admin can assign another group admin (this capability should only be given to site-wide admin / super admin)
  4. In group page, group admin of another group can see the button to assign member in any group page

I'm working on this
@giosakti giosakti self-assigned this Dec 16, 2018
@giosakti giosakti mentioned this issue Dec 16, 2018
Merged
@giosakti
Copy link
Contributor Author

see PR #134

giosakti added a commit that referenced this issue Dec 20, 2018
@giosakti
Merge pull request #134 from gate-sso/issue-#133
c7192dd 
Issue #133 - Fixing authorization issues on user and group page
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@giosakti giosakti

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@giosakti