Ticket #6137 (new defect)

Opened 7 months ago

Last modified 6 months ago

Privilege assignment buggy

Reported by: frankpie Assigned to: developer
Priority: unassigned Milestone: 5.2.0
Component: vtigercrm Version: 5.1.0-rc
Keywords: Cc:

Description

Create 3 users and set the sharing privileges for the company all to private, create a group and make all 3 users a member of this group. Create a new user. Check the user_privileges/sharing_privileges_<user>.php after creation. You will see that the 'GROUP'=>array is filled by the group information you have setup for the other users but this array should be empty. The fault is in

function getUserModuleSharingObjects

$query="select vtiger_datashare_grp2grp.* from vtiger_datashare_grp2grp inner join vtiger_datashare_module_rel on vtiger_datashare_module_rel.shareid=vtiger_datashare_grp2grp.shareid where vtiger_datashare_module_rel.tabid=?"; ...

if (count($groupList) > 0) {

$query .= " and vtiger_datashare_grp2grp.to_groupid in (". generateQuestionMarks($groupList) .")";

If a user has no groups all group information get assigned

Change History

07/23/09 01:21:26 changed by asha

  • milestone changed from 5.1.0 to 5.1.1.

08/24/09 01:28:38 changed by

  • milestone deleted.

Milestone 5.1.1 deleted

08/26/09 06:25:29 changed by pratim

  • milestone set to 5.2.0.