"Can assign and unassign service points to users" allows to edit user profile

Description

Create a user that has only this permission: "Can assign and unassign service points to users".
Login as that user.
Open the Users app, open the detail view of any user, open the edit view, change some value, save the changed user profile.

Expected: Can successfully edit the user profile and save the changes because the permission "Can assign and unassign service points to users" (ui-users.edituserservicepoints) includes the subpermission "Can edit user profile" (ui-users.edit). Reference: https://github.com/folio-org/ui-users/blob/v2.26.0/package.json#L133-L140
Actual: As expected.

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

Julian Ladisch December 20, 2019 at 8:18 AM

Closing because it works as expected.

Julian Ladisch December 20, 2019 at 8:17 AM

Thank you for your feedback.

Assigning the permission "Users: Can view user profile" (ui-users.view) is redundant:

"Can assign and unassign service points to users" (ui-users.edituserservicepoints) contains the sub-permission
"Can edit user profile" (ui-users.edit). https://github.com/folio-org/ui-users/blob/v2.26.0/package.json#L133-L140
"Can edit user profile" (ui-users.edit) contains the sub-permission
"Users: Can view user profile" (ui-users.view). https://github.com/folio-org/ui-users/blob/v2.26.0/package.json#L73-L77

Martin Spenger December 20, 2019 at 7:52 AM


Thank you for the info and mentioning the expected result in the bug description. I didn't realize, that the Permission also includes the subpermission "Can edit user profile". Now it is clear. Maybe I can update the test case description here: https://foliotest.testrail.io/index.php?/tests/view/10788

In the original test case, I also have to assign the permission "Users: Can view user profile" and the expected result in the test case is just to verify that you can edit service points.

I think we can close this ticket.

Julian Ladisch December 19, 2019 at 10:25 PM

Can you elaborate why this is a bug?

Cannot Reproduce

Details

Assignee

Reporter

Priority

Development Team

Prokopovych

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created December 19, 2019 at 10:18 PM
Updated December 20, 2019 at 8:18 AM
Resolved December 20, 2019 at 8:18 AM
TestRail: Cases
TestRail: Runs

Flag notifications