User can see own Survey but can't access it

More
2 months 1 week ago - 2 months 1 week ago #211694 by mrn_fbuehler
Hello everybody,

I have a problem which I can't solve. A user has a suvey assigned to him and is able to see it, in the survey-overview.
However, when he tries to open it, he gets an error "Zugriff verweigert" which means "Access denied".

The user is part of the "default" group which has the permission to create surveys. If I add the permission to "view" the other survey, he can access it, but of course now can see the other surveys, which is unwanted.

The admin user can open the survey without problems.

Even when I change the surve owner to another user of the group "default", the new user has the same problem.

Am I doing something wrong or am I missing something?
I am using Version 4.4.1+210201.
Best
Felix

Visible in the overview:
 

But can't access it:
Attachments:
Last edit: 2 months 1 week ago by mrn_fbuehler.

Please Log in to join the conversation.

LimeSurvey Partners
More
2 months 1 week ago #211711 by cdorin
Hey, and thanks for update!

Which db and php versions are you using? and OS?

Manual: manual.limesurvey.org/LimeSurvey_Manual
Bugs tracker: bugs.limesurvey.org/my_view_page.php
If you self-host and need help, contact one of our partners: limesurvey.com
Please do not contact me via PM - thank you.

Please Log in to join the conversation.

More
2 months 1 week ago #211739 by mrn_fbuehler
Hey cdorin,
thanks for your reply.

I'm using
mysql Ver 8.0.22 for Linux on x86_64 (MySQL Community Server - GPL)
on this system:
Linux mysql-01 4.19.0-10-amd64 #1 SMP Debian 4.19.132-1 (2020-07-24) x86_64

and LimeSurvey is installed on this system:
Linux limesurvey 4.19.0-13-amd64 #1 SMP Debian 4.19.160-2 (2020-11-28) x86_64


I'm running on
PHP 7.3.19-1~deb10u1 (cli) (built: Jul  5 2020 06:46:45) ( NTS )

Kind Regards
Felix

Please Log in to join the conversation.

More
2 months 1 week ago #211768 by DenisChenu
Can you give some screenshot of :

Global right of the user
This survey rights (list of user)

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
2 months 1 week ago #211793 by mrn_fbuehler
Hey Denis,

thanks for the hint. For some reason the rights in the Survey were gone. Added them now and it's fixed.

But I had another error yesterday: After upgrading from 4.4.1 to 4.4.4, the settings of the user group "default", which is only allowed to create own survey, had ALL permissions and I was not able to disable them. After saving, they were just like before.

But I think it's better to create a new topic for this, right?

Best and thanks for the help so far.

Felix

Please Log in to join the conversation.

More
2 months 1 week ago #211794 by DenisChenu
> the settings of the user group "default",

There are no "default" user group, user are not in any survey group by default.

> had ALL permissions and I was not able to disable them

Can you show me a screenshot ? What permission : global or in "default" group ?

The default survey group (group #1) is forced as public : always shown.
 

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
2 months 1 week ago #211796 by mrn_fbuehler
Hey Denis,

sorry, small typo, big confusion. I meant user role, not user group.
Normally, all users are in this role, so that they can create their own surveys.
 

After the update, all Checkboxes were marked (without me doing anything there) and I couldn't revert it. The users were able to see all other surveys and change things on the global settings.
I immediately downgraded to 4.4.1 again.

I found no bug report or topic in the forum which mentioned this.

Best Felix
Attachments:

Please Log in to join the conversation.

More
2 months 1 week ago #211798 by DenisChenu
Argl …

Can you show me the rights set on User role ?

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
2 months 1 week ago - 2 months 1 week ago #211799 by mrn_fbuehler
Hey Denis,

I don't know what exactly you mean. Isn't my screenshot that, what you are asking for? After the update, in my screenshot all checkboxes were marked and I couldn't uncheck them (after saving, nothing happened, although the PopUp said "OK").

Best Felix
Last edit: 2 months 1 week ago by mrn_fbuehler.

Please Log in to join the conversation.

More
2 months 1 week ago #211802 by DenisChenu
I have this issue with User role bugs.limesurvey.org/view.php?id=16958

You don't have on 4.4.1 ?

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
2 months 1 week ago #211803 by DenisChenu

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.

Please Log in to join the conversation.

More
2 months 1 week ago #211805 by mrn_fbuehler
So according to the short gif in the bug tracker you can reproduce the problem if I see it right?
It does not only prevent workflow, but of course enables all user to watch every other survey and the answers.

Best
Felix

Please Log in to join the conversation.

More
2 months 1 week ago - 2 months 1 week ago #211811 by DenisChenu
Yes ,

And i have the fix (and understand what happen)

You have the other issue : bugs.limesurvey.org/view.php?id=16958

For example : you muts allow "Connect via AuthDB" to role ? Else User with role can not log in ?

It's the way you want ?

can you explain how you use role ?
(and put some real user experience on 16958: User with roles can not have more rights … )

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand , plugin development . I don't answer to private message.
Last edit: 2 months 1 week ago by DenisChenu.

Please Log in to join the conversation.

More
2 months 1 week ago #211818 by holch

It does not only prevent workflow, but of course enables all user to watch every other survey and the answers.

But you are aware that you are using a version of Limesurvey that is not declared "stable", right?

I answer at the LimeSurvey forum in my spare time, I'm not a LimeSurvey GmbH employee.
No support via private message.
The following user(s) said Thank You: DenisChenu

Please Log in to join the conversation.

More
2 months 1 week ago #211851 by mrn_fbuehler

For example : you muts allow "Connect via AuthDB" to role ? Else User with role can not log in ?

Yes exactly. I'm not that familiar with LS, so I just thought that's the way it should be.

can you explain how you use role ?
(and put some real user experience on 16958: User with roles can not have more rights … )

I have one admin account and several users which are all in group "default" with permission as in the screenshot above. So all users are allowed to create their own surveys and do whatever they want with them. No other permissions.


I'm quite surprised how fast all this went, Bugreport, Pull Request, etc. Thanks for the effort.

Please Log in to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now