umbraco / Umbraco.Deploy.Issues

1 stars 0 forks source link

Possible to bypass granular permission on a content node #204

Open dgroal opened 7 months ago

dgroal commented 7 months ago

It's possible to bypass a "Queue for transfer" permissions set on a content node.

If you set a permission to not allow "Queue for transfer" for a specific user group on a node like this:

image

A user belonging to the user group will still be able to transfer the node by transferring the parent node and use "Include all items below".

CMS version: 10.8.2 Deploy version: 10.3.3


This item has been added to our backlog AB#38153