Angular: eg-org-family-select with limitPerms set can include ancestors that the user doesn't have access to

Bug #1932363 reported by Galen Charlton
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Evergreen
New
Medium
Unassigned

Bug Description

Consider an eg-org-family-select that uses limitPerms and leaves the ancestor selector enabled.

If the user selects the checkbox to include ancestors, it is possible that not all of the ancestor OUs are ones that the user has permission to access. The checkbox should (probably) limit itself to just ancestors that the user has permission to use.

Evergreen 3.6+

Tags: angular
Revision history for this message
Galen Charlton (gmc) wrote :

If the selector influences a pcrud search, this can make it more likely for a user to run into bug 1847805.

Changed in evergreen:
importance: Undecided → Medium
tags: added: angular
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.