traccar / traccar-web

Traccar GPS Tracking System
https://www.traccar.org
Apache License 2.0
789 stars 1.09k forks source link

Saved commands can be deleted by any non-privileged user. #1127

Open TecSeguridad opened 1 year ago

TecSeguridad commented 1 year ago

I'll explain a case that happened to me several times. I create a saved command as an administrator, for example, "Power cut," and then assign it to all regular users to avoid having to do it multiple times. Then a non-privileged user deletes it from their account, and it disappears for everyone. I believe they shouldn't be allowed to delete it, especially if it was created by an administrator.

Greetings.

tananaev commented 1 year ago

It sounds like you're sharing the same commands with everyone. Instead you should create separate instances for each user. Or you can make your users read-only.

TecSeguridad commented 1 year ago

Thank you Anton i understand, However, when there are many users, it becomes a bit cumbersome, but I think it would be good if only administrators could delete commands shared by themselves. Thank you for the response.

tananaev commented 1 year ago

It's going to require a big change to the permissions architecture we have now.

ubiteczla commented 1 year ago

use the LIMIT COMMANS checkbox they can see the comands you share but not edit or delete them

TecSeguridad commented 1 year ago

That´s a good option, thanks