Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forms not restricted to an entity #1030

Closed
blacksushi42 opened this issue Jul 5, 2018 · 2 comments · Fixed by #1055
Closed

Forms not restricted to an entity #1030

blacksushi42 opened this issue Jul 5, 2018 · 2 comments · Fixed by #1055
Assignees
Labels
Milestone

Comments

@blacksushi42
Copy link

Hello,

I wanted to report than when we have a form restricted in an entity, we can load it and validate it in another entity. We have simply change entity with the selector.

"Destination entity" set up to "current active entity" make than tickets are not really create where we wanted.

I'm on glpi 9.3 and formcreator 2.6.3

Best regard

@btry
Copy link
Collaborator

btry commented Jul 5, 2018

After conf call,

the issue is a missing check when a user is filling a form.

To reproduce

  • Create a form in the entity Root > A
  • Login as a user in the entoty Root > A and access the form to fill it
  • connected as the same user, switch to the entoty Root > B

expected

the access to the form is denied

observed

the user has access to the form and can fill it.

@btry btry added the bug label Jul 5, 2018
@btry btry self-assigned this Jul 5, 2018
@btry btry added this to the 2.6.4 milestone Jul 5, 2018
@btry btry reopened this Aug 1, 2018
@btry
Copy link
Collaborator

btry commented Aug 1, 2018

Reopened due to several feedbacks.

see #1055 for a enhancement

@btry btry closed this as completed in #1055 Aug 6, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants