Ticket #754 (closed Defect: fixed)

Opened 7 years ago

Last modified 7 years ago

Nightly Build: create new user

Reported by: JuergeN Owned by: jri
Priority: Major Milestone: Release 4.5
Component: DeepaMehta Standard Distribution Version: 4.4
Keywords: Cc: Malte
Complexity: 3 Area:
Module:

Description

I created a new user testuser on todays nightly build. After logging in as testuser I can see the dialog to create a new user. In my understanding this dialog may only be visible to people who are members of the system workspace. What do you think?

Change History

comment:1 Changed 7 years ago by JuergeN

  • Owner set to jri
  • Status changed from new to assigned

comment:2 Changed 7 years ago by jri

  • Cc Malte added

Currently the type "User Account" is assigned to the DeepaMehta workspace, which is public. So every logged in user can create new user accounts. Everything works as expected (from my technically point of view).

Technically, assigning the type "User Account" to the System workspace would make no difference as this is public as well.

We could tweak the Webclient GUI to let it show the "New User Account" menu item only for System members. But technically this sounds not right to me as it breaks our rules (according to ticket:592#comment:1). Through the REST API user accounts can still be created.

Design-wise I agree: it might be reasonable to allow "New User Account" only to "administrators", that is members of the System workspace.

Are we supposed to rethink our "create rule" or the concept of the System workspace?

comment:3 Changed 7 years ago by jri

  • Status changed from assigned to closed
  • Resolution set to fixed

Meanwhile user accounts can only created by users who have WRITE access to the System workspace.

Note: See TracTickets for help on using tickets.