Hi,
using: Core, MVC, jQuery project - v7.2.2
just a couple of wishes - for the ANZ framework :-)
"Changing permissions"
with this disabled for at user - they can still, change (remove/add) roles to users - this should not be possible I think.
"Login as this user"
with this enabled - it can be used to login as Admin - and thereby change permission on other users.
Info:
8 Answer(s)
-
0
Hi @ismcagdas
Re.1
If you assign the permissions "Editing user" (or "Creating new user") - but not the "Changing permissions"
Then the user can edit/create user (that's ok) - but they can and also assign roles or remove roles (giving a user more or less permissions).Re.2 OK
-
0
Hi @deltavision
Thanks, got it. I will create an issue on GitHub and reference it here.
Thanks again.
-
0
This issue is closed because of no recent activity. Please create a new issue if you are still having this problem.
-
0
Hi ismcagdas
is there a GitHub issue on this?
-
0
@deltavision I will check and get back to you.
-
0
Hi @ismcagdas
any news on these issues :-)
-
0
Hi @deltavision
We couldn't reproduce this on AspNet Zero. Is it possible for you to share your project via email with info@aspnetzero.com ?
Thanks,