Forum GLPI-Project

grefabu

Member

Registered: 2017-09-22

Posts: 110

Entiety Admin could manipulate an User from upper Entiety

Hi,

I test things with Entietys. I found, that an Admin from an entiety could manipulate an user from a upper entiety.
Don't now if this is an feature or setting or bug.

He isn't able to change authorisation but change entrys in the common fields like name etc.
Think this is'nt realy bad, but for me something to wonder,...

Bye

Gregor

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: Entiety Admin could manipulate an User from upper Entiety

I confirm the bug: https://github.com/glpi-project/glpi/issues/3702
Correction for 9.1.x and 9.2.x: https://github.com/glpi-project/glpi/pu … 2544c9c77a

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)