onesteinbv / addons-project-nextcloud

1 stars 0 forks source link

Access rights issue:Users with sync user access are able to see,edit and add user setup for other users #42

Open bvanjeelharia opened 1 year ago

bvanjeelharia commented 1 year ago

Currently, users with Nextcloud Sync - Sync User access are able to see configuration as well from where they can see,edit and add user setup for other users which shouldn't be the case.

Ideally, there should be just one group- Nextcloud Sync - Sync Admin, users with this access should be able to manage user setup for users as well as run sync.For other users, they shouldn't have access to the Nextcloud Sync Menu Itself.They should just have access to the user setup from user profile and a button should be added there which would allow to sync only their events.

So , basically users with Sync Admin should be able to sync events for all users while others should just be able to sync theirs.

Please check this and let me know in case you have queries