[eGroupWare-tracker] Bugs #2987: ACL rights ignored - all user are visible/selectable for all others ?

[<tr...@eg...>]

Ticket modified by camel camel at 2011/09/20 15:30
Tracking SystemBugs
CategoryAPI
VersionTrunk
StatusClosed
ResolutionRejected
Completed100%
Priority5 - medium
Created bycamel camel
Created on2011/06/08 15:24
Assigned toRalf Becker
Summary#2987 - ACL rights ignored - all user are visible/selectable for all others ?
hi, what i see:
if i make a group: "A" and add there 10 users
if i make a group: "B" and add there 10 users

the users from A or B can see the user from both groups ?
normally users from group A should only see users from group A

is this really wanted ?
i mean, normally, onyl user from the same group can be selected
(ex: calendar)
also all groups can be selected ?

why is this possible, are there no ACL's which will be checked ?
Comment by camel camel at 2011/09/20 15:30:
sorry, this was in older versions not working, but tried it - and seems to be, that user have no choice to change to another one ...
thanks birgit :)

Comment by Birgit Becker at 2011/09/20 14:10:
Hi Camel,

if user-selection is forced to "groupmembers" you will not see any members of other groups. The other user-selection-options will always allow to see and select also other users (for sure not the no-selection-at-all-option).

So if you really wand to make sure, that nobody can see any other users you need to force that for user-selection or make a default-pref and "hope" that nobody switchs it or deny the access to the preferences

Birgit


Comment by camel camel at 2011/07/13 00:11:
does this really make sense ?
would it not better to do this via extra ACL rights, if that is wanted, that everyone can see everone ?


Linked entries:
https://community.egroupware.org/egroupware/index.php?menuaction=tracker.tracker_ui.edit&tr_id=2987&no_popup=1