OpenSlides / openslides-backend

Backend service for OpenSlides 4+
MIT License
6 stars 26 forks source link

Allow meeting admin user to update a non admin user that shares all his meetings with requesting user. #2576

Open hjanott opened 1 month ago

hjanott commented 1 month ago

Closes #2522

hjanott commented 1 month ago

Discussed with @Elblinator that it should be sufficient for the client to only have a presenter that returns true if a user can be edited. An issue for the client needs to be created anyway. The existing get_user_scope presenter will be obsolete and deleted at a later point of time. Relevant group permissions are user.can_update and user.can_manage.

Elblinator commented 1 month ago

The client counterpart is the following Issue: https://github.com/OpenSlides/openslides-client/issues/3841

Elblinator commented 3 hours ago

I tested the PR with different scenarios and sometimes the backend returns Errors even though the action should be permitted. What I did: