chstath / gss

Automatically exported from code.google.com/p/gss
Other
0 stars 0 forks source link

Fake permission change in Firefox #105

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1.give read or write permissions, but not modify, to a group on some folder
2.try to change permissions on a folder in the left pane with some user form a 
group (e.g. give modify permissions on a group, or give some other permission 
to a third party who already has some permissions on a specified folder)
3.see if the rights changed

What is the expected output? What do you see instead?
If you follow this scenario in Firefox 3.x or 4.x GSS will display an error 
"Resource not found, or user specified in sharing does not exist" and the 
permissions will not change but if you try to look at the permissions again on 
a specified folder it will be displayed as if they were changed (i.e. 
permissions will be marked as if they did change). However the permissions do 
not change, as they are not supposed to in the first place.

What version of the product are you using? On what operating system?
Error occures on Firefox 3.x and 4.x on Linux client, and on GSS version 1.5.1. 
compiled from source on CentOS 5 server.

Please provide any additional information below.
The error only occures on Firefox and not on Chrome. Also this only applies if 
you try to change rights on the left pane (on folders). The same thing does not 
happen if you try to change permissions on files (right side) and a different 
message is displayed "User in permissions does not exist" (so it works 
correctly).

This leads to a suggestion that it would be nice if users who do not have 
modify permissions should not be able to see who else has permissions on a 
resource (let alone change them) or at least should have permissions greyed 
just as the owner permissions are greyed (which a user obviously cannot change).

Original issue reported on code.google.com by mislav.s...@gmail.com on 26 May 2011 at 10:50