Closed ivanslabbert closed 1 month ago
The issue occurred due to the following: (Using groups names A, B and C as reference.)
Suggested solution:
Note on self-assigned permissions: This type of ACL's is generally only used where user members of a group need direct access to document members. This was added specifically to allow a Super Admin user to have access to all documents in a system.
recreating the bug: Remove group "assign" permissions from the Super Admins entry in the Super Admins group and save the change. Re-adding "assign" gets rejected by the API. Is this the expected behavoir?
Issue seems to be that ACL's on groups for group permissions are only applied to child groups and not to the group itself.