Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Subgroup move should not be authorized if subgroup owner is not a member of new parent group #34

Open
oseg opened this issue Sep 28, 2018 · 0 comments

Comments

@oseg
Copy link
Contributor

oseg commented Sep 28, 2018

Scenario:

  • login as user01
  • user01 creates an open group called "user01 parent group"
  • user01 creates an 2nd open group called "user01 2nd parent group"
  • login as user02
  • user02 joins "user01 parent group"
  • user02 creates a subgroup of "user01 parent group" called "user02 subgroup"
  • login as user01
  • edit "user02 subgroup" and move it to "user01 2nd parent group"

Results:
=> user02 is member of "user02 subgroup" but user02 is not member of "user01 2nd parent group"

Expected results:
=> This move should not have been authorized because the subgroup owner was not a member of the new parent group

@oseg oseg changed the title Users can move subgroups even if they are not member of targeted parent group Subgroup move should not be authorized if subgroup owner is not a member of new parent group Sep 28, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant