Ticket #754 (closed Defect: fixed)
Nightly Build: create new user
| Reported by: | JuergeN | Owned by: | jri |
|---|---|---|---|
| Priority: | Major | Milestone: | Release 4.5 |
| Component: | DeepaMehta Standard Distribution | Version: | 4.4 |
| Keywords: | Cc: | Malte | |
| Complexity: | 3 | Area: | |
| Module: |
Description
I created a new user testuser on todays nightly build. After logging in as testuser I can see the dialog to create a new user. In my understanding this dialog may only be visible to people who are members of the system workspace. What do you think?
Change History
comment:2 Changed 10 years ago by jri
- Cc Malte added
Currently the type "User Account" is assigned to the DeepaMehta workspace, which is public. So every logged in user can create new user accounts. Everything works as expected (from my technically point of view).
Technically, assigning the type "User Account" to the System workspace would make no difference as this is public as well.
We could tweak the Webclient GUI to let it show the "New User Account" menu item only for System members. But technically this sounds not right to me as it breaks our rules (according to ticket:592#comment:1). Through the REST API user accounts can still be created.
Design-wise I agree: it might be reasonable to allow "New User Account" only to "administrators", that is members of the System workspace.
Are we supposed to rethink our "create rule" or the concept of the System workspace?
