Actions
Defect #1071
closedOn the user's detail, I can see role requests of other users
Status:
Closed
Priority:
Normal
Assignee:
Ondřej Kopr
Category:
Roles
Target version:
-
Start date:
04/13/2018
Due date:
% Done:
100%
Estimated time:
Affected versions:
Owner:
Description
I created a new user. On its detail and the tab Role, there is a section "roles pending approval" which lists WF of OTHER users.
Logged in as admin (superAdminRole)
Affected version 7.7.0
This might be severe security problem. If so, please make a hotfix for both 7 and 8 versions.
Files
Actions