search

brustj / tracmor

Automatically exported from code.google.com/p/tracmor
GNU General Public License v2.0
0 stars 0 forks source link

User permissions not properly enforced when editing assets #97

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago 
What steps will reproduce the problem?
1. Create a user assigned to a role that has view access (but NOT edit access) 
to built-in asset fields.
2. Log in as this user and open an asset, and click the Edit button.

What is the expected output? What do you see instead?
The user should not be able to assign a parent asset since they have only view 
access to built-in fields.

Please use labels and text to provide additional information.

Original issue reported on code.google.com by jsincl...@tracmor.com on 10 Nov 2011 at 7:12

GoogleCodeExporter commented 8 years ago 
This issue was closed by revision r886.

Original comment by kovserg@gmail.com on 18 Nov 2011 at 4:15